Automated Doesn’t Mean Ungoverned: Keeping API-Driven Workflows Audit-Ready
Automation is one of the clearest wins an API can deliver, and it’s also one of the easiest ways to quietly lose track of how sensitive data moves through an...
Security and Compliance Blog
Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.
Posts by Danielle Barbour
Danielle Barbour, Director of Product Marketing, Kiteworks
Danielle Barbour is Senior Director of Product Marketing, Regulatory Compliance at Kiteworks. Prior to joining Kiteworks, Danielle had direct experience with regulatory compliance within the medical tech start-up space and previously worked in the insurance and software industries. Danielle excels in translating diverse and creative ideas into strong revenue-driving programs.
She holds an MBA from Saint Mary’s College of California and a Bachelor’s degree from San Francisco State University.
The AI Governance Gap Isn’t a Policy Problem. It’s an Evidence Problem
Ask a CISO or a chief compliance officer what keeps them up at night about AI agents, and the honest answer is rarely “the agents.” It is the question a...
How to Implement GDPR-Compliant Legal Document Management
Legal departments handle increasingly sensitive data across complex digital workflows, making GDPR compliance a critical operational requirement rather than a checkbox exercise. Traditional document management approaches often fragment sensitive information...
Financial Conduct Authority Expectations for Operational Resilience in Banking: A Strategic Framework for Enterprise Risk Management
The Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) operational resilience framework represents a fundamental shift in how banks must approach security risk management, moving beyond traditional business continuity...
How to Implement DORA Incident Reporting for Spanish Financial Entities
The Digital Operational Resilience Act fundamentally transforms how Spanish financial institutions must approach cybersecurity incident reporting. With enforcement underway, Spanish banks, insurers, and investment firms face stringent requirements for detecting,...
What Manufacturing Companies Need for Export Control Compliance
Manufacturing companies face intense scrutiny over technology transfers, dual-use goods, and sensitive data flows across international borders. Export control regulations create complex compliance obligations that extend far beyond traditional shipping...
What German Financial Institutions Need for BaFin and DORA Resilience Compliance
German financial institutions face increasingly complex regulatory requirements that demand sophisticated approaches to operational resilience and third-party risk management. Guidance from BaFin (including MaRisk and BAIT) alongside the EU Digital...
GDPR Compliance Requirements for Legal Data Sharing: A Strategic Guide for Enterprise Security Leaders
Legal data sharing under GDPR creates complex compliance obligations that extend far beyond basic data protection measures. When law firms, corporate legal departments, and their business partners exchange sensitive information...
How to Meet ANSSI Security Standards for Government Systems
French government agencies and public sector organisations face increasingly sophisticated cybersecurity threats whilst managing sensitive citizen data and critical national infrastructure. The ANSSI provides comprehensive security standards that define mandatory...
EAR vs. ITAR: What the Export Administration Regulations Actually Control
Many exporters wrongly assume export controls apply only to obviously military goods — weapons, munitions, defense hardware. That assumption is both common and costly. The Export Administration Regulations (EAR) reach...
The CMMC 2.0 Final Rule: What It Established and Where Things Stand Now
The Department of Defense finalized its Cybersecurity Maturity Model Certification (CMMC) 2.0 rule in September 2025, amending the Defense Federal Acquisition Regulation Supplement (DFARS). The rule took effect November 10,...
CMMC 2.0 Compliance Checklist: Every Control Domain, Item by Item
This is a working checklist, not a narrative. If you want the sequential story of how a CMMC 2.0 certification project unfolds from first assessment to ongoing maintenance, see our...
What English Manufacturers Need to Know About ISO 27001:2022 Transition
English manufacturers face mounting pressure to modernise their information security management systems as supply chain partners, regulatory bodies, and customers demand evidence of robust cybersecurity controls. The transition to ISO...
SDAIA Guidelines for Government Cloud Procurement in Saudi Arabia: Compliance Strategy for Enterprise Leaders
Saudi Arabia's digital transformation accelerates through the Saudi Data and Artificial Intelligence Authority (SDAIA) guidelines for government cloud procurement. These comprehensive requirements reshape how organisations approach cloud security, data governance,...
GDPR Article 32 Requirements for Swiss Financial Institutions: Security Controls and Compliance Architecture
Swiss financial institutions face mounting pressure to demonstrate robust data compliance controls that satisfy both domestic banking regulations and European data protection standards. GDPR Article 32 establishes specific technical and...