NIST SP 800-161 Cybersecurity Supply Chain Risk Management
The standard that turns supplier risk into documented decisions and contract terms.
Priya Nattanmai
Section
Compliance Frameworks
5 stories in Compliance Frameworks.
EU AI Act Obligations for Enterprises Using AI Vendors
Enterprises using AI vendors face non-delegable duties they can't outsource to providers.
Dagny Solberg-Krause
Regulatory Examination Readiness for Third-Party Risk Programs
Regulators now demand risk judgment proportionate to actual exposure, not checklist completion.
Theo Barajas
HIPAA Business Associate Agreement Risk Management
Signing a BAA is where vendor risk management begins, not where it ends.
Priya Nattanmai
OCC and FFIEC Third-Party Risk Guidance for Banks
Regulators replace 2023 guidance with principles-based approach to lower fintech partnership costs.
Dagny Solberg-Krause