The Ultimate Guide to Risk & Compliance
A curated Asian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Risk & Compliance.
What to know about Risk & Compliance
Risk & Compliance is a critical domain encompassing the strategies, tools, and frameworks organisations use to identify, manage, and mitigate risks while ensuring adherence to regulatory standards and internal policies. This area has grown increasingly complex with evolving technology landscapes and cyber threats, making it essential for businesses to stay informed and adaptive.
Recent developments highlight the dynamic nature of risk and compliance, including innovations like AI-powered suites enhancing governance, risk, and compliance (GRC) management, as well as emerging security challenges such as growing API vulnerabilities in financial sectors and the targeting of cloud resources by cyber-attacks. Organisations must navigate an expanding regulatory environment, with new standards and certifications marking benchmarks for data protection, operational resilience, and cybersecurity readiness.
Beyond technology, risk and compliance involve critical considerations around human factors, corporate governance, and the alignment of security practices with business objectives. Insights into cloud governance, supply chain security, and identity management demonstrate the multifaceted approach required to manage risks effectively in a digital-first world.
For readers, exploring stories tagged with Risk & Compliance offers valuable perspectives on cutting-edge solutions, regulatory changes, and strategic guidance. It is an essential resource for professionals aiming to understand and implement robust risk management frameworks, enhance cybersecurity posture, comply with evolving standards, and ultimately safeguard their organisations against the multifarious risks of today’s interconnected environment.
Asian Risk & Compliance News
Regional stories with direct local relevance
RDVCC details fees & identity rules for virtual cards
Users must clear identity checks before opening RDVCC virtual cards, while deposits start at 35 USDT and card fees begin at $1.
Hyperlayer launches loan deposit feature for Morgan Stanley
Eligible borrowers at Morgan Stanley Wealth Management can now access securities-based loan proceeds in existing accounts, with spending rules enforced automatically.
How Chinese AI Data Vendors Can Earn Global Trust in Healthcare
International buyers will judge Chinese healthcare data vendors on provenance, privacy and auditability, not low prices, as trust becomes the real test.
The fastest way to build confidence in AI is to put it in everyone's hands
Broad access to approved tools has helped the insurer drive adoption, with more than 82% of colleagues using generative AI by September 2026.
Digift sets controls for AI agents in tokenised finance
Institutions will need tighter checks before letting AI agents trade tokenised assets, as Digift warns that analysis, advice and execution must stay separate.
Keeper links Tenable scans to instant cloud remediation
Security teams can now fix Tenable alerts in seconds, as Keeper links detections to automated credential rotation and just-in-time access.
Analyst Insights
Research and market analysis connected to Risk & Compliance
Four Steps CISOs Can Take To Secure AI-driven Software Development
Collins urges new thinking on cybersecurity decisions
Gartner flags 10 tech trends for 2027 as AI governance
Ping Identity named leader in Gartner's new CIAM report
Anthropic adds 11 partners to Claude for financial advisers
Featured News
First Digital: Agentic AI to reshape payment infrastructure
Businesses are being urged to build safeguards now as AI agents could soon be transacting more value than humans, First Digital says.
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
Rising attacks on connected factories are pushing regulators to require proof of security from shipment through service, Rockwell says.
GitHub: Developers aren't disappearing. They're leveling up
AI is pushing software teams into higher-value roles, with GitHub saying developers are moving from coding to orchestration and business alignment.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
VAST Data targets AI data sovereignty with DataEnclave
Enterprises and governments could run AI on sensitive data without exposing it, as the technology targets sovereignty rules across APAC.
UiPath: AI agents force rethink of junior tech roles
Routine junior tasks could soon be handed to AI agents, forcing firms to redeploy early-career staff towards strategic work, UiPath's CEO says.
Workiva: The secret compliance and reporting arms race
Driven by improved tooling, finance teams are meeting higher standards as regulators and analysts scrutinise disclosures faster.
Filigran: Does your CISO know enough?
CISOs are under pressure to answer boardroom questions on exposure in minutes, as Filigran pushes CTEM and open-source validation tools.
Exclusive: ABBYY says AI build costs will drive buying
Enterprises could cut AI spend by up to 80% by shifting document workflows away from custom builds and into standard platforms.
Exclusive: ABBYY launches hybrid AI document models
Enterprises under pressure to curb AI risk and cost are being given a hybrid option that blends generative models with OCR and rules-based extraction.
Docusign's next move: Own the contract, not just the signature
Rapid adoption as Docusign's IAM platform cuts contract delays and turns signed agreements into AI-driven workflows.
AI transforming physical security into enterprise data solution
AI and cloud tools are turning cameras into live operational data sources, helping firms cut costs, spot errors and manage fleets centrally.
Future of AI is distributed infrastructure built on open source
Rising AI demand is exposing cloud bottlenecks, as firms eye in-house open source systems to cut costs and limit vendor lock-in.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
Trusted identity cuts across physical and logical systems
Unified identity systems can cut admin overhead and shrink attack surfaces as remote work and cyber threats blur physical and digital access.
AI will fade, says Dell Technologies' ephemeral Chief AI Officer
Dell says agentic AI should shift routine tasks below the machine line, freeing staff for expert work while making the role temporary.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
Network segmentation - you can't attack what you can't see
Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.
Expert Columns
AI in AppSec: Why Finding Vulnerabilities Is No Longer Enough
AI Literacy And Governance: The Workforce Skills Enterprises Need For Responsible AI
How tax authorities use AI to audit transfer pricing, and why your paperwork is now the risk
Securing the AI Systems of Tomorrow
Data Governance in Banking: A Framework for Better Data Quality
How Chinese AI Data Vendors Can Earn Global Trust in Healthcare
Digital sovereignty in practice: three examples of balancing control with global reach
The fastest way to build confidence in AI is to put it in everyone's hands
Cybersecurity Awareness: The Importance of Getting the Basics Right
Why revenue leaders need a connected commerce chain
Interviews
Interviews and video coverage from the network
First Digital: Agentic AI to reshape payment infrastructure
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
GitHub: Developers aren't disappearing. They're leveling up
Interview: Cloudera says AI agents reshape zero trust
VAST Data targets AI data sovereignty with DataEnclave
Recent Risk & Compliance News
Commvault adds agent recovery for Bedrock & Foundry
It aims to help enterprises trace and undo unintended actions by AI agents before they spread across data, applications and infrastructure.
OKX publishes 49th monthly proof of reserves report
Four years of monthly disclosures have helped reassure users after sector collapses put exchange solvency under scrutiny.
Cloud Security Alliance launches verified AI assurance level
Organisations now have a third-party check on AI governance as businesses face tighter scrutiny over how systems are monitored and controlled.
Latin America red tape overtakes tax as expansion hurdle
Regulatory and administrative hurdles are deterring Latin American expansion more than tax, with friction averaging 61 against 26 across eight markets.
Rubrik extends Google Cloud backup to BigQuery & Storage
The move gives organisations a separate recovery path for analytics and AI data, after attacks on cloud backups and identity systems have risen.
AI edge in group protection hinges on data quality
Poor member records could blunt insurers' AI gains, leaving group protection providers unable to improve underwriting, claims or service consistently.
Forrester warns of shadow AI governance gap in Asia Pacific
One in three large Asia Pacific enterprises will struggle to govern shadow AI agents as staff-built tools outpace internal controls, Forrester says.
Australian MSPs face rising demand for AI security advice
Nearly six in 10 prospective customers are worried about AI-related threats, pushing Australian MSPs to explain cyber risk in plain language.
OneSchool Global expands Dayforce to unify workforce
The rollout should cut admin for teachers and give leaders a single view of vacancies, recruitment and compliance across 20 countries.
Uptiq launches GovernAI for financial institutions
The tool is meant to ease board and regulator concerns by giving lenders audit trails, approvals and user controls for AI agents.
Nuix launches AI agent for forensic investigations
The new tool aims to speed legal and regulatory casework while preserving a traceable record of each AI-generated answer for scrutiny.
Forrester warns of shadow AI surge in Asia Pacific
A governance gap could leave large Asia Pacific firms exposed, with Forrester predicting shadow AI agents will outnumber approved ones by 10 to 1.
Xero expands Chaney partnership with Melio payments
The move could simplify cross-border giving and bill payment for churches, while helping Chaney & Associates add about 50 clients a year.
Google Cloud adds Anthropic-managed Claude deployment
Customers can now choose between tighter compliance controls and faster access to new Claude features on Google Cloud without changing billing.
Kyndryl & AWS launch modernisation service for firms
Many organisations are lagging on technology upgrades, and the new Kyndryl and AWS offer is meant to cut the risk of large-scale modernisation.
Compliance teams risk fines when skipping AI checks
Teams using unverified AI guidance are far more likely to be fined, with 37% of those skipping expert review reporting a penalty, survey data show.
Illumio warns AI authority is outpacing security controls
Most firms now hand AI decisions once reserved for staff, but fewer than half can fully audit its actions, a new survey found.
Logicalis wins Cisco secure networking specialisation
It gives multinational customers a single secure networking managed-service model across five markets, with plans to double that reach within six months.
Fleet adds NVIDIA AI workstations to device management
IT teams can now monitor AI workstations and deskside supercomputers alongside laptops and servers, tightening oversight as firms adopt NVIDIA hardware.
Black Kite adds quantum readiness to supplier cyber ratings
Companies can now see which suppliers are already moving towards quantum-safe encryption, as Black Kite folds the new checks into its cyber ratings.
Job Moves
Manulife promotes Andy Bruce to Chief Information Officer
Revolut names Singapore advisory board to aid Asia push
QuikBot names Howie Lau as Board Adviser for strategy
QBE names Andy Tsui to lead Hong Kong underwriting
QBE names Reuben Lee to lead Asia transactional liability
QBE Re names Soichiro Tanaka Head of Southeast Asia
QBE names Carles Tondo Head of Property for Asia
NAVEX names Nick Mitsuya as Japan Country Manager to drive growth
Lendela appoints new CFO & CTO to drive APAC expansion
