Topics /
Compliance RSS Feeds
1 feed from 1 site tagged “compliance”. Follow one here, or copy its address into any RSS reader.
Follow the whole topic
The newest compliance posts from across the directory as one feed, for any reader:
Latest compliance posts
FinCEN下令切断MEXC与美国金融体系的联系，OKX警告用户勿直接转账
FinCEN下令美国金融机构停止与MEXC开展业务，并指称该交易所于2021年5月至2026年5月间处理至少$16.7 billion疑似非法资金；禁令将在命令刊登于《联邦公报》30天后生效。 🔗 阅读原文 via Pay.news · https://pay.news/items/yk1x4noh4zdzsazwc8u4krcoz
AI Voice Agent Disclosure: 12 Tests for the First 10 Seconds of a Call
A voice agent can answer correctly and still fail its first caller-facing control: the caller may not know the voice is AI, may hear that fact too late, or may mistake an AI notice for a recording notice. For an EU-facing…
FinCEN Withdraws Proposed Crypto Travel Rule Expansion in Separate November Move
FinCEN and the Federal Reserve are withdrawing a proposed expansion of US recordkeeping and Travel Rule requirements that would have covered certain…
A compliant QMS belongs to the whole team, not the RA inbox
One CAPA review taught me that the fastest team was not necessarily the team with the fewest approvers. It was the team where the person closest to the problem could put it into the quality system without asking someone else to retype it. A process engineer had spotted recurring variation in a…
FinCEN命令美国金融机构停止与MEXC Global进行转账
FinCEN命令美国金融机构停止处理与MEXC Global之间的法币或加密货币转账，禁令将在《Federal Register》发布30天后生效。FinCEN称，MEXC在2021年5月至2026年5月间处理了约$16.7 billion与潜在非法活动有关的转账，其中约$1.5 billion涉及俄罗斯制裁规避，但这些发现本身不证明MEXC犯罪。 🔗 阅读原文 via Pay.news · https://pay.news/items/iuvujk7kosq7u682eiaydx19k
Security certification is a snapshot, and buyers read too much into it
In this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate does and does not promise. In her team’s analysis, about 6 in 10 vulnerabilities matched to certified products, smartcards aside, were disclosed…
EU ETS transhipment row: are UK ports next?
No UK port is designated under the EU ETS transhipment rule, but Felixstowe, London and Southampton face calls. What the 65% threshold means for UK shippers.
Presentation: Zero Trust Agent Systems that Pass Audits and Still Ship
Advait Patel shares a playbook for securing AI agent systems in production. He discusses moving defense boundaries from the prompt to the tool layer, enforcing scoped workload identities, and mitigating prompt injection via tool outputs. He explains how to structure audit-ready observability and…
EU CBAM downstream extension: trilogue watch
EU lawmakers are negotiating which finished goods join CBAM from 2028. Where the trilogue stands, what is already in scope, and what UK exporters should do now.
Only people with skin in the game should be behind AI mortgage tools
Compliance rules and real follow-up workflows can break generic chatbots in production lending
AWS Elastic Beanstalk for regulated workloads: Built for the next decade, not just the first deploy
For more than a decade, the managed application platform industry has optimized around a compelling promise: get code running as The post AWS Elastic Beanstalk for regulated workloads: Built for the next decade, not just the first deploy appeared first on The New Stack .
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies. The post Nobody Trusts the Security Questionnaire. We Rely on It Anyway. appeared first on SecurityWeek .
MBA Compliance and Risk 2026: Appropriately startled
Speakers warned synthetic identities and fake deeds can undermine underwriting, QC and servicing controls
A few engineers asked IT for Linux. Then it spread to 200 machines.
Linux is already part of the AI developer’s desktop toolkit. Nvidia’s DGX Spark, which became available to order on October The post A few engineers asked IT for Linux. Then it spread to 200 machines. appeared first on The New Stack .
Localizing compliance at scale: achieving South Korea’s ISMS certification
Cloudflare has achieved South Korea's ISMS certification following an audit across 80 controls. Learn how we localized user consent flows, adapted social sign-up paths at the edge, and validated our global security program.
Mastercard Introduces Fraud Screening Before Stablecoin Payments Go On-Chain
TL;DR: Mastercard has launched Stablecoin Security, a risk-scoring tool designed to help financial institutions examine payments before and during their movement across blockchains. Stablecoin transfers can settle quickly. Investigating a suspicious payment before it happens is a much harder task…
