Watching 52 official sources · all on schedule · last checked 12 minutes ago
Critical High Medium Low Info
PCI DSS Low Guidance
PCI SSC publishes guidance on compensating controls and customized approachThe PCI Security Standards Council has released a new information supplement titled "PCI DSS v4.x: Guidance for Compensating Controls and the Customized Approach" to help organizations …
FedRAMP Low New document
FedRAMP publishes Public Notice NTC-0012 on Updated Incident Communications ProceduresFedRAMP has published Public Notice NTC-0012, which documents the outcome of Request for Comment (RFC-0031) concerning updated incident communications procedures. This notice formalizes the changes and …
PCI DSS Low New document
PCI SSC publishes Secure Software Standard – Sensitive Asset IdentificationPCI SSC has published the Secure Software Standard – Sensitive Asset Identification, a new standard for secure software development. This standard provides requirements for identifying and …
FedRAMP Medium Amendment
FedRAMP replaces 'Authorization' terminology with 'Certification' and introduces classes A, B, C, DFedRAMP has renamed all 'FedRAMP Authorization' designations to 'FedRAMP Certification' and replaced impact level designations with a new classification system using classes A, B, C, and …
CISA FedRAMP Low New document
FedRAMP publishes NOTICE-0010 responding to CISA V1: ED 25-03FedRAMP has published NOTICE-0010 as an official response to CISA V1: ED 25-03. This notice provides FedRAMP's position and guidance on how the CISA directive applies …
FedRAMP Low New document
FedRAMP adds RFC-0031 Updated Incident Communications ProceduresFedRAMP has added RFC-0031 Updated Incident Communications Procedures to its compliance framework. This new procedure updates how cloud service providers must communicate security incidents to government …
FedRAMP Low New document
FedRAMP publishes NOTICE-0009 on machine-readable packages and cybersecurity serviceFedRAMP has published NOTICE-0009 detailing the initial outcome of RFC-0024 concerning FedRAMP Rev5 machine-readable packages, and released information about the FedRAMP Cybersecurity Service. This notice provides …
FedRAMP Medium Amendment
FedRAMP adds RFCs 0026-0030 for Rev5 updates and improvementsFedRAMP has published five new Requests for Comments (RFCs 0026-0030) related to Rev5 updates and improvements. These RFCs provide guidance on proposed changes to the FedRAMP …
FedRAMP Low New document
FedRAMP adds RFC-0025FedRAMP has added RFC-0025 to its request for comments series. The specific details of this RFC are not provided in the available documentation.
FedRAMP Low New document
FedRAMP publishes initial outcome of RFC-0023 Rev5 Program Certifications (No Sponsor Required)FedRAMP published a public notice with the initial outcome of RFC-0023 Rev5 regarding Program Certifications that do not require a sponsor. This update reflects FedRAMP's evolving …
PCI DSS Low Guidance
PCI SSC publishes Mobile Point of Contact GuidancePCI Security Standards Council has published new guidance on Mobile Point of Contact (MPoC) requirements. This guidance clarifies expectations for organizations handling mobile payment transactions and …
FedRAMP Low Guidance
FedRAMP publishes initial outcomes of RFC-0022 on leveraging external frameworksFedRAMP has published a public notice outlining the initial outcomes of RFC-0022, which addresses the use of external security frameworks within the FedRAMP authorization process. This …
CISA Info Other Enforcement
CISA publishes public notice for Emergency Directive 26-03CISA has published a public notice for Emergency Directive 26-03. This announcement makes the directive publicly available for federal agencies and contractors using federal information systems. …
PCI DSS Low New document
PCI SSC updates PIN Security Requirements and Testing ProceduresPCI Security Standards Council has updated the PIN Security Requirements and Testing Procedures document. This update addresses current security practices and testing methodologies for PIN protection …
PCI DSS Low New document
PCI SSC publishes Derivative Test RequirementsPCI Security Standards Council has published Derivative Test Requirements. This document provides guidance on testing procedures for derivative implementations of PCI standards. The requirements establish baseline …
PCI DSS Medium New version
PCI SSC publishes Point of Interaction (POI) Modular Security RequirementsPCI SSC has published the Point of Interaction (POI) Modular Security Requirements along with a summary of changes document. This new guidance provides modular security requirements …
PCI DSS Low New document
PCI SSC publishes Point of Interaction (POI) Modular Security RequirementsPCI SSC has published the Point of Interaction (POI) Modular Security Requirements standard. This document establishes security requirements for systems and devices that handle payment transactions …
PCI DSS Low New document
PCI SSC publishes Card Production and Provisioning Physical Security RequirementsPCI Security Standards Council has published Card Production and Provisioning Physical Security Requirements as a new standard to establish physical security controls for card production and …
PCI DSS Low New document
PCI SSC publishes Card Production and Provisioning Logical Security RequirementsPCI SSC has published the Card Production and Provisioning Logical Security Requirements, a new standard addressing security controls for logical systems involved in card production and …
PCI DSS Low New document
PCI SSC publishes Case First PIN guidancePCI Security Standards Council has published the Case First PIN guidance document. This resource provides guidance on implementing PIN (Personal Identification Number) security measures with a …
PCI DSS Low New document
PCI SSC publishes Secure Software StandardPCI SSC has published the Secure Software Standard, establishing requirements for organizations developing and managing software to ensure security throughout the development lifecycle. This standard applies …
EU Cybersecurity Act ENISA Low New document
EU proposes Cybersecurity Act 2 to update ENISA mandate, certification framework, and ICT supply chain securi…The European Commission has proposed a new regulation (Cybersecurity Act 2) to replace the current Regulation (EU) 2019/881 on ENISA and cybersecurity certification. The proposal aims …
EU Cybersecurity Act NIS2 Medium Amendment
EU proposes amendments to NIS 2 Directive for simplification and alignment with Cybersecurity ActThe European Commission has proposed amendments to Directive (EU) 2022/2555 (NIS 2 Directive) to introduce simplification measures and ensure alignment with the proposed Cybersecurity Act 2. …
EU AI Act Medium Amendment
Proposal amends medical device regulations to simplify rules and reduce compliance burdenThe European Commission proposes amendments to the medical device regulations (MDR and IVDR) aimed at simplifying rules and reducing the compliance burden for manufacturers and competent …
FedRAMP Medium Amendment
FedRAMP updates certain rev5 templatesFedRAMP has released updates to certain revision 5 templates. These updates reflect refinements to the compliance and assessment documentation requirements for cloud service providers operating under …