Security News & Regulatory Intelligence

CMMC 2.0's Program Rule Is Now in Effect — What Contractors Need to Know

32 CFR Part 170 is live. The DFARS acquisition rule that actually puts CMMC into contracts is rolling out separately, and on its own timeline.

HHS Proposes Mandatory MFA and Encryption Under an Updated HIPAA Security Rule

The January 2025 NPRM would convert several 'addressable' safeguards into flatly required ones. It is proposed, not final — but the direction is clear.

ISO/IEC 27001:2022 Transition Deadline: What Happens If You Miss It

Organizations certified under the 2013 version had a hard deadline, set by the International Accreditation Forum, to move to the 2022 controls. Here's what a missed transition actually means.