Sovereign Regulatory IntelligenceStay Ahead of Global Change

Organizations operating high-risk AI systems in the EU must prepare for the upcoming enforcement milestones as defined by the latest legislative timeline. While some deadlines have been deferred, firms must ensure they have designated national competent authorities and established necessary risk management protocols.

The European Commission has officially amended the EU AI Act to extend compliance deadlines for high-risk AI systems by 18 to 24 months. This adjustment aims to provide organizations with necessary regulatory clarity and address implementation challenges identified during the initial rollout phase.

Financial institutions are being urged to conduct rigorous third-party risk assessments to maintain DORA compliance. Experts emphasize that maintaining an updated register of ICT dependencies and embedding mandatory DORA clauses in vendor contracts are essential to avoiding regulatory penalties.

SAI360 has announced the acquisition of Plural Policy to bolster its AI-driven regulatory change management offerings. This move is designed to help GRC professionals automate the tracking of complex, multi-jurisdictional regulatory updates.

Germany's financial regulator, BaFin, has published updated guidance notes to assist banks and insurers in meeting Digital Operational Resilience Act (DORA) requirements. The guidance signals a transition away from legacy circulars like BAIT and VAIT toward a unified DORA-compliant framework.

The European Commission has introduced a new Action Plan to coordinate the intersection of cybersecurity and artificial intelligence across member states. The initiative focuses on leveraging AI to identify critical vulnerabilities while ensuring compliance with existing frameworks like NIS2, DORA, and the Cyber Resilience Act.

The rapid proliferation of unmanaged AI agents in the workplace is creating significant new attack surfaces and compliance vulnerabilities for enterprises.

Organizations are pivoting away from manual, people-heavy compliance processes toward automated GRC platforms to manage increasing regulatory complexity.

Compliance assessments are moving from periodic, static audits to continuous, real-time monitoring driven by advanced data analytics.

A massive spike in deepfake-led social engineering attacks is forcing organizations to overhaul identity verification and employee training protocols.

Global regulatory shifts and geopolitical tensions are making cybersecurity a critical business risk, with regulators increasingly holding boards directly accountable.

ServiceNow has released a critical patch to address a software vulnerability that exposed customer data to the internet. This update is essential for organizations using ServiceNow to maintain data security and compliance.