Resources [Blog ](/blog)[Events ](/events)[Breaches ](/breaches)[Resources ](/resources)[News](/news) # Compliance and Regulations Articles, news, and research on cybersecurity compliance and regulations. Categories * [View all](/blog) * [Attack Surface Management](/category/attack-surface-management) * [Company news](/category/company-news) * [Compliance and Regulations](/category/compliance-and-regulations) * [Cyber Risk Posture Management](/category/cyber-risk-posture-management) * [Cybersecurity](/category/cybersecurity) * [Data Breaches](/category/data-breaches) * [DevOps](/category/devops) * [Human Cyber Risk](/category/human-cyber-risk) * [Risk Automations](/category/risk-automations) * [Risks and Vulnerabilities](/category/risks-and-vulnerabilities) * [Third-Party Risk Management](/category/third-party-risk-management) * [Trust Exchange](/category/trust-exchange) * [Vendor Risk Management](/category/vendor-risk-management) ## Featured post * Compliance and Regulations ## [Cyber Resilience Act Preparedness: Who's Ready, and Who Can't Be Reached](/blog/cyber-resilience-act-preparedness-whos-ready-and-who-cant-be-reached) We surveyed 2,374 EU-registered devices and 226 listed software makers for a way to report a vulnerability. Market leaders are ready. Others, not so much. Greg Pollock October 13, 2026 ## Compliance and Regulations * * Human Cyber Risk * Compliance and Regulations ### [AI Assurance: The Third Head of Your AI Governance Watchdog](/blog/ai-governance-to-ai-assurance) AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now. Shane Moosa October 29, 2026 * * Compliance and Regulations ### [NIST compliance in 2026: A complete implementation guide](/blog/nist-compliance) NIST compliance ensures alignment with leading cybersecurity frameworks. Explore how the NIST standards can safeguard sensitive data and manage third-party Edward Kost January 5, 2026 * * Compliance and Regulations ### [Introducing UpGuard’s DPDP Act Security Questionnaire](/blog/upguards-dpdp-security-questionnaire) Discover the latest addition to UpGuard's industry-leading Questionnaire Library and learn how to achieve comprehensive DPDP compliance. Nicholas Sollitto November 19, 2024 * * Compliance and Regulations ### [APRA CPS 230: Definition, Summary & Compliance Guide](/blog/apra-cps-230-compliance-guide) Learn about the new requirements of CPS 230 and how to achieve compliance before it comes into effect on 1 July 2025. Leah Sadoian December 2, 2025 * * Compliance and Regulations ### [From NIS to NIS2: What Your Organization Needs to Know](/blog/nis-vs-nis2) Understanding the transition from NIS to NIS2 is crucial for protecting your organization. Explore the key changes and compliance steps in this blog. Leah Sadoian July 4, 2025 * * Compliance and Regulations ### [How to Prepare for a Cyber Essentials Plus Audit](/blog/prepare-for-a-cyber-essentials-plus-audit) Learn more about the Cyber Essentials Plus independent assessment process, and steps your organization can take to prepare. Leah Sadoian July 3, 2025 * * Compliance and Regulations ### [PSPF 001-2024: Safeguarding GovTech from Foreign Influence](/blog/pspf-001-2024) Explore Australia’s new PSPF Direction, including key components and strategies to help government entities prevent foreign influence over tech assets. Leah Sadoian July 4, 2025 * * Compliance and Regulations ### [GDPR's Influence on Indian Data Protection Practices](/blog/gdprs-influence-on-indian-data-protection) Explore the impact of the GDPR on India's cyber regulations, comparing pre-GDPR and post-GDPR data protection laws. Leah Sadoian July 11, 2025 * * Compliance and Regulations ### [NCIIPC Explained: Safeguarding India’s Critical Infrastructure](/blog/nciipc-explained) Discover how the National Critical Information Infrastructure Protection Centre ensures cyber resiliency across India’s critical sectors. Leah Sadoian December 1, 2025 * * Compliance and Regulations ### [Understanding the NICE Cybersecurity Workforce Framework](/blog/the-nice-cybersecurity-workforce-framework) Gain a better understanding of the cyber workforce landscape with the NICE Framework, and explore how implementation can benefit your organization. Leah Sadoian July 6, 2025 * * Compliance and Regulations ### [Navigating Cybersecurity Requirements Under the Dodd-Frank Act](/blog/cybersecurity-under-dodd-frank) Learn what cybersecurity regulations and strategies financial services institutions need to be aware of to protect their third-party attack surface. Nicholas Sollitto October 26, 2026 * * Compliance and Regulations ### [Preparing for Cybersecurity Audits: Insights from US Regulations](/blog/preparing-for-cybersecurity-audits) Prepare your organization for upcoming cybersecurity audits by exploring key US regulations, focused on enhancing data security in the digital age. Leah Sadoian December 2, 2025 * * Compliance and Regulations ### [India's Blueprint for Cyber Safety: The National Security Policy 2013](/blog/national-security-policy-2013) Examine the National Security Policy 2013's mission, objectives, key components, and strategies for enhancing cybersecurity in India and beyond. Leah Sadoian July 3, 2025 * * Compliance and Regulations ### [Improving India’s Cyber Defenses: Maharashtra’s Cyber Security Project](/blog/maharashtras-cyber-security-project) Explore Maharashtra's cybersecurity project, key components, and how it sets a cybersecurity benchmark for other Indian states. Leah Sadoian July 3, 2025 * * Compliance and Regulations ### [Guide to SWIFT CSCF (Customer Security Controls Framework)](/blog/swift-cscf) Explore the SWIFT Customer Security Controls Framework to the biggest payment network in the world. Kyle Chin January 7, 2025 * * Compliance and Regulations ### [GDPR: Penalties for Noncompliance and How to Avoid Them](/blog/gdpr-penalties-for-noncompliance) Explore penalties associated with GDPR noncompliance, real-life examples of violations, and practical strategies to keep your organization compliant. Leah Sadoian December 2, 2025 1 / 13 [Next](/category/compliance-and-regulations?page=2) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)