HIPAA Updates and Threat Models
HIPAA reform seems to lead to published threat models, and that’s going to be a hard change.
Shostack + Friends Blog
Posts in category “regulation”
NIST 800-218 revision
NIST 800-218 wants you!
The Cyber Resilience Act (CRA)!
The CRA is coming and it's going to be a dramatic change for technology producers
National Cyber Incident Response Plan comments
Our comments on the National Cyber Incident Plan
FDA Final Cyber Guidance is out
The FDA has released their new guidance, which will be broadly impactful.
SEC Cybersecurity Rules
The SEC has important new cybersecurity rules