Topic · Third Party Risk Management
Every dispatch tagged Third Party Risk Management.
Cloud and AI Development Act: Parliament’s Draft Report Puts Cloud Exit Plans Back on the Agenda
On November 11, 2026, the two European Parliament rapporteurs on the Cloud and AI Development Act (CADA) presented their joint draft report in Brussels, and their message was…
Latest from the Privacy Desk
All dispatches →
THIRD PARTY RISK MANAGEMENT Black October: A Legal and Compliance Playbook for the Wave of AI-Driven Cyberattacks
Security teams have spent October 2026 patching around the clock, and people in the incident-response business have started calling it “Black October.”…
COMPLIANCE CISA, NSA and Australia’s ACSC Publish Post-Quantum Questions to Ask Your Vendors
On November 5, 2026, the U.S. Cybersecurity and Infrastructure Security Agency, the National Security Agency, and the Australian Signals Directorate’s Australian Cyber…
AI The OpenAI Agents Didn’t Need Superpowers. They Used Other People’s Loose Ends
Most of the commentary on July’s OpenAI and Hugging Face incident has focused on the agents: how a group of AI models…
AI Most Companies’ AI Risk Comes From Tools They Bought. A Practical Plan to Manage It
Most of the public debate about AI regulation is about the companies that build frontier models.
AI Ottawa Bets CAD 1.6 Billion on Cohere. Sovereign AI Still Comes Down to Your Contract
Canada has decided that where its AI runs, and who controls the data flowing through it, is a question of national policy.
LAW FIRMS Leak-Site Listings of Law Firms Jumped 39%. Why Outside Counsel Belongs in Your Vendor Risk Program
Criminal extortion groups publicly named 455 legal organizations on their data leak sites in the year to August 2026, up 39 percent…
AI AI Can Now Write Proofs That Code Won’t Crash. Here’s What “Formally Verified” Does and Doesn’t Promise
The same AI systems that have become good at finding software flaws are now being pointed at a harder job: proving that…
THIRD PARTY RISK MANAGEMENT Britain Will Ask Who Pays When Insecure Software Gets Breached. Vendors Have a Year to Answer
For years, the British approach to insecure software has been to ask nicely.
AI Sweden’s Government Offices Block ChatGPT and Claude. The Real Issue Is the Missing Contract
Since Monday, October 26, staff at the Government Offices of Sweden can no longer open ChatGPT or Claude on their work computers.
THIRD PARTY RISK MANAGEMENT GMO Internet Pays Every Customer After Desktop Cloud Breach: A Breach Response Case Study
A Japanese internet company is paying every customer of a hacked service, whether or not they lost money.
THIRD PARTY RISK MANAGEMENT Cathedral’s Test of Anthropic Went Through Third-Party Software. Here Is What That Means for Your SaaS Stack
A security start-up founded this year by former staff of the U.S.
Digital Marketing Privacy
Every core channel a marketing team relies on — email, SMS, social ads, retargeting, analytics — runs on personal data, and every…