ILC Dover Shows Cyber Compliance Claims Need Evidence
A cybersecurity compliance claim is only as strong as the evidence you can produce when someone challenges it, and the government has just put a $13 million price on the...
Security and Compliance Blog
Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.
Posts by Danielle Barbour
Danielle Barbour, Director of Product Marketing, Kiteworks
Danielle Barbour is Senior Director of Product Marketing, Regulatory Compliance at Kiteworks. Prior to joining Kiteworks, Danielle had direct experience with regulatory compliance within the medical tech start-up space and previously worked in the insurance and software industries. Danielle excels in translating diverse and creative ideas into strong revenue-driving programs.
She holds an MBA from Saint Mary’s College of California and a Bachelor’s degree from San Francisco State University.
Show NIST Privacy and Cybersecurity Alignment With One Policy Engine and One Audit Log
Privacy and security teams keep getting asked the same question from different directions: can you show that the personal data you handle is governed, protected, and traceable? Many organizations answer...
Nuevas leyes de privacidad exigen evaluaciones, y los equipos de auditoría deben demostrar su cumplimiento
Cada nueva ley de privacidad suma un documento que alguien debe poder presentar cuando se le solicite. Baja un umbral, se amplía una definición, surge una nueva evaluación y el...
New Privacy Laws Add Assessments, and Audit Teams Must Prove Them
Every new privacy law adds a document that someone must be able to produce on demand. A threshold falls, a definition widens, a new assessment appears, and the compliance team...
Clinical AI Liability Turns on Evidence
When a clinical AI tool is tied to patient harm, nobody will start by asking which model produced the output. They will ask who could see which patient records, under...
AI Agent Governance Needs Evidence the Agent Cannot Edit
An organization that cannot show who accessed what, under which policy, and with whose authority has no real defense when a regulator asks about an AI agent. A reported incident...
Federal AI Incident Guidance Puts Evidence First
The first question after an AI agent does something nobody told it to do is not “who is to blame.” It is “what can you prove?” Most organizations cannot answer...
Audit Evidence for AI Agent Activity Is a Log, Not a Policy
Boards and auditors ask how an organisation oversees the AI systems it uses. A policy document is the usual first answer. It describes intent and shows nothing about what actually...
Compliance Agents in the Kiteworks Agent Marketplace Turn Folder Reviews Into Questions
A lot of compliance effort goes into reviews that are out of date the day they finish. Someone samples a folder, fills a spreadsheet, writes a summary and files it....
Compliance Agents in the Kiteworks Agent Marketplace Turn Folder Reviews Into Questions
A lot of compliance effort goes into reviews that are out of date the day they finish. Someone samples a folder, fills a spreadsheet, writes a summary and files it....
Proving Your Safeguards Against Accidental Data Disclosure
When an auditor or a data protection officer asks what stops an employee sending personal data to the wrong person, a policy document is a thin answer. An awareness course...
Defence Organisations Aren’t Exempt From “Appropriate to the Risk”
GDPR has been enforceable for years, and Article 32 remains the single most commonly cited provision in major fines. Defence organisations handling employee and personnel data are not exempt from...
Healthcare Security Measures Regulators Still Flag
GDPR has been enforceable for years, and Article 32 remains the single most commonly cited provision in major fines. Health systems handling special category patient data face a proportionally higher...
Financial Services and the Trust Problem in Its Own Audit Trail
A bank can usually produce an audit log when a regulator asks. Far fewer can answer a harder question: could someone with administrative access have quietly edited that log before...
Building an Audit Trail That Holds Up for Defence
A contractor can usually produce an access log when an assessor asks. Far fewer can answer a harder question: could someone with administrative access have quietly edited that log before...