Government Archives

Why FIPS 140-3 Encryption Matters for AI Agent Data Access

by Bob Ertl March 25, 2026March 25, 2026 | Cybersecurity Risk Management

Most organizations deploying AI agents against regulated data believe they have encryption covered. The API calls use TLS. The data at rest is AES-256. The model hosting provider has a...

The Federal Government Just Told You Its Cloud Security Process Is Broken

by Paul Sechser March 24, 2026March 24, 2026 | Cybersecurity Risk Management

On March 18, 2026, ProPublica published an investigation that should alarm every organization that relies on FedRAMP authorization as a trust signal for cloud security. The story is straightforward: Federal...

CMMC 2.0 Levels Explained: Advanced and Expert Cybersecurity Guide

by Bob Ertl March 18, 2026 | CMMC Compliance

MMC 2.0 Level 2 (Advanced) Level 2 (Advanced) is the second level of the CMMC 2.0 framework. It is an intermediate level that requires companies to implement more specific practices...

Only 48 Cloud Services Hold FedRAMP High authorization — and Agencies Are Feeling the Squeeze

by Danielle Barbour March 17, 2026March 17, 2026 | Regulatory Compliance

The scarcity of FedRAMP High authorized cloud services is not an abstract compliance concern. It is a procurement bottleneck that forces federal agencies to make security tradeoffs with their most...

Federal Cyber Policy Shift: Offense Over Defense Strategy

by Patrick Spencer March 11, 2026March 11, 2026 | Regulatory Compliance

The White House released two significant cyber policy documents on the same day — a pairing that was not accidental. The executive order focuses on operational coordination to disrupt transnational...

AI Safety Asia: Crisis Diplomacy and Evidence-Based AI Governance at India Summit 2026

by Tim Freestone March 11, 2026March 11, 2026 | Cybersecurity Risk Management

Something shifted at the India AI Impact Summit 2026, and it wasn’t subtle. The conversation about governing advanced AI systems stopped circling around whether governments should step in and landed...

What Happens When You Give AI Agents Real Power

by Tim Freestone March 10, 2026March 10, 2026 | Cybersecurity Risk Management

The pitch is compelling. AI agents that can manage your email, execute code, coordinate with other systems, and act on your behalf—all without you lifting a finger. The productivity gains...

Data Sovereignty in the Defense Industrial Base: What Contractors Need to Know

by Danielle Barbour March 4, 2026March 4, 2026 | CMMC Compliance

For most industries, data sovereignty compliance comes down to a geographic question: where is data allowed to live, and which government’s laws govern it? For defense contractors, that question is...

DHS AI Strategy Unveiled: Kiteworks Delivers the Solution

by Patrick Spencer March 4, 2026March 4, 2026 | Cybersecurity Risk Management

The Department of Homeland Security doesn’t do small. Twenty-two component agencies. 260,000 employees. Missions that span border security, cybersecurity, immigration, and disaster response. And now, a formal mandate to adopt...

U.K. Government AI Adoption: Shadow Risks and Gaps Exposed

by Marc ten Eikelder March 2, 2026March 2, 2026 | Cybersecurity Risk Management

The U.K. government has set out one of the most ambitious AI agendas in the world. National strategies from DSIT and the Cabinet Office. A Digital Centre of Government. An...

France’s Public Sector AI Adoption Crisis: Last Place Revealed

by Marc ten Eikelder March 2, 2026March 2, 2026 | Cybersecurity Risk Management

France has done almost everything right on paper. A National AI Strategy since 2018. Billions invested through France 2030. World-class research institutions. A ‘trusted AI’ framework closely aligned with the...

Your Expert Guide to Selecting the Best Sovereign Cloud Service

by Danielle Barbour March 2, 2026March 2, 2026 | Regulatory Compliance

A sovereign cloud is the right choice when you must keep data, processing, and governance confined to a jurisdiction and governed by local law—minimizing exposure to foreign access or extraterritorial...

Germany’s AI Adoption Stalled: Compliance Culture Hinders Public Sector

by Marc ten Eikelder March 2, 2026March 2, 2026 | Cybersecurity Risk Management

Germany does not have a technology problem. It does not have an awareness problem. It does not even have a resistance problem. What Germany has is a permission problem —...

How to Stop Cross‑Border Data Transfer Vulnerabilities

by Danielle Barbour February 27, 2026February 27, 2026 | Regulatory Compliance

Moving sensitive information across jurisdictions is now routine—and risky. This guide distills what works for regulated enterprises and governments, and where a centrally governed Private Data Network like Kiteworks helps...

Top Secure Collaboration Tools for 2026: On‑Premises and Regional Options

by Marc ten Eikelder February 27, 2026February 27, 2026 | Regulatory Compliance

Enterprises in regulated sectors are done compromising on where their data lives. In 2026, the best secure collaboration software with on‑premises data sovereignty gives IT and security leaders deployment choice—true...

Get started.