SOC 2 Archives

AI Reshapes Phishing as Top Initial Access Vector

AI Phishing Lures Reclaim Top Initial Access Spot in 2026

by Uri Kedem May 12, 2026May 12, 2026 | Secure Email

For four consecutive quarters, phishing had been dethroned. Exploitation of public-facing applications — fueled by a wave of on-premises Microsoft SharePoint compromises — had taken the top spot as the...

Best Practices for Securing Investment Research Document Exchange

by Tim Freestone April 6, 2026April 6, 2026 | Secure File Sharing

Investment research documents contain material non-public information, proprietary analysis, and client-specific recommendations that attackers, competitors, and insiders actively target. These documents move between analysts, portfolio managers, clients, and third-party contributors...

What the SEC’s AI Disclosure Requirements Actually Mean for Compliance Teams

by Danielle Barbour March 25, 2026March 25, 2026 | Regulatory Compliance

Financial services firms have been deploying AI agents against their most sensitive workflows — client reporting, trade reconciliation, regulatory filing preparation, and portfolio analysis. Most of these workflows touch data...

NYDFS Part 500 and AI: What New York’s Cybersecurity Regulation Requires of Agent Governance

by Danielle Barbour March 25, 2026March 25, 2026 | Regulatory Compliance

New York’s financial services institutions are deploying AI agents across client reporting, underwriting, claims processing, fraud detection, and regulatory workflows. Most of these workflows access nonpublic information — the category...

Why RAG Implementations Fail Security Review — and How to Build One That Doesn’t

by Tim Freestone March 16, 2026March 16, 2026 | Cybersecurity Risk Management

The demo worked. The pilot was compelling. The business case was strong. And then the security review started. For many enterprise AI teams, this is where Retrieval Augmented Generation (RAG)...

Your Vendors Are Getting Hacked Once a Month. Here’s What That Means for Your Business.

by Patrick Spencer February 24, 2026February 24, 2026 | Third Party Risk

Let’s start with a number that should make every executive pause: the average organization experienced 12 third-party breaches last year. That’s one breach per month, coming not from your own...

10 Secure File Sharing Solutions Every SMB Should Evaluate

by Robert Dougherty December 1, 2025December 23, 2025 | Secure File Sharing

Small and medium-sized businesses face mounting pressure to protect sensitive data while maintaining efficient workflows. Secure file sharing solutions have evolved beyond basic cloud storage to become comprehensive platforms that...

Custom Solutions & Compliance with Kiteworks

Platform Information/Feature

How to Design a Secure File Transfer Workflow for Third-Party Vendors and Contractors

by Bob Ertl November 6, 2025December 23, 2025 | Third Party Risk

Third-party vendors and contractors require access to organizational data to perform their contracted services, creating security challenges that internal user management doesn’t address. External parties operate outside organizational security controls,...

How to Design a Secure File Transfer Workflow for Third-Party Vendors and Contractors

by Bob Ertl November 6, 2025December 23, 2025 | Third Party Risk

Third-party vendors and contractors require access to organizational data to perform their contracted services, creating security challenges that internal user management doesn’t address. External parties operate outside organizational security controls,...

API-Driven MFT: A Developer’s Guide to Secure Integration and Automation

by Bob Ertl November 6, 2025December 23, 2025 | Managed File Transfer

Modern applications require programmatic file transfer capabilities that integrate seamlessly with business workflows. Manual file transfers through web interfaces don’t scale for enterprise applications processing thousands of files daily, synchronizing...

SOC 2

AI Phishing Lures Reclaim Top Initial Access Spot in 2026

What the SEC’s AI Disclosure Requirements Actually Mean for Compliance Teams

NYDFS Part 500 and AI: What New York’s Cybersecurity Regulation Requires of Agent Governance

Why RAG Implementations Fail Security Review — and How to Build One That Doesn’t

Your Vendors Are Getting Hacked Once a Month. Here’s What That Means for Your Business.

Custom Solutions & Compliance with Kiteworks

How to Design a Secure File Transfer Workflow for Third-Party Vendors and Contractors

How to Design a Secure File Transfer Workflow for Third-Party Vendors and Contractors

API-Driven MFT: A Developer’s Guide to Secure Integration and Automation

Automated Compliance: How Secure Data Forms Simplify Audit Readiness

Automated Compliance: How Secure Data Forms Simplify Audit Readiness

Best Practices for Protecting Client Privacy in Law Firm Web Forms

Critical Security and Compliance Requirements for Modern Web Forms

Get started.