The Ultimate Guide to Risk & Compliance
A curated Asian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Risk & Compliance.
What to know about Risk & Compliance
Risk & Compliance is a critical domain encompassing the strategies, tools, and frameworks organisations use to identify, manage, and mitigate risks while ensuring adherence to regulatory standards and internal policies. This area has grown increasingly complex with evolving technology landscapes and cyber threats, making it essential for businesses to stay informed and adaptive.
Recent developments highlight the dynamic nature of risk and compliance, including innovations like AI-powered suites enhancing governance, risk, and compliance (GRC) management, as well as emerging security challenges such as growing API vulnerabilities in financial sectors and the targeting of cloud resources by cyber-attacks. Organisations must navigate an expanding regulatory environment, with new standards and certifications marking benchmarks for data protection, operational resilience, and cybersecurity readiness.
Beyond technology, risk and compliance involve critical considerations around human factors, corporate governance, and the alignment of security practices with business objectives. Insights into cloud governance, supply chain security, and identity management demonstrate the multifaceted approach required to manage risks effectively in a digital-first world.
For readers, exploring stories tagged with Risk & Compliance offers valuable perspectives on cutting-edge solutions, regulatory changes, and strategic guidance. It is an essential resource for professionals aiming to understand and implement robust risk management frameworks, enhance cybersecurity posture, comply with evolving standards, and ultimately safeguard their organisations against the multifarious risks of today’s interconnected environment.
Asian Risk & Compliance News
Regional stories with direct local relevance
Keeper links Tenable scans to instant cloud remediation
Security teams can now fix Tenable alerts in seconds, as Keeper links detections to automated credential rotation and just-in-time access.
Asia Pacific construction costs set to outpace Europe
Developers face higher budgets as JLL sees Asia Pacific tender inflation at 3.8% to 4.7% in 2027, above Europe's forecast.
.webp)
Owlting flags 15-fold growth in OwlPay Harbor payments
Payment volume on OwlPay Harbor surged about 15-fold in six months as Owlting broadened its regulated cross-border network to more than 100 enterprise clients.
Aspire launches AI accounting tool AspireBooks in Singapore
The new software could cut month-end bookkeeping drudgery for Singapore firms by updating records as transactions happen and keeping reports current.
Tanium extends endpoint management to NVIDIA AI kit
Enterprises using local AI hardware will gain unified oversight of inventory, patching and compliance as Tanium plugs a longstanding management gap.
BRAC Bank goes live with Finastra trade finance software
Corporate clients in Bangladesh should see faster trade transactions after BRAC Bank replaced fragmented processes with a single digital platform.
Analyst Insights
Research and market analysis connected to Risk & Compliance
Wrike named Gartner leader for fourth straight year
Nintex launches process tool to tie AI to workflows
Sphera named leader in Verdantix risk intelligence
What Is Shadow AI and What Does It Mean for Your Organisation?
Fortinet: The AI challenge is visibility and control, not permission
Featured News
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
Rising attacks on connected factories are pushing regulators to require proof of security from shipment through service, Rockwell says.
GitHub: Developers aren't disappearing. They're leveling up
AI is pushing software teams into higher-value roles, with GitHub saying developers are moving from coding to orchestration and business alignment.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
VAST Data targets AI data sovereignty with DataEnclave
Enterprises and governments could run AI on sensitive data without exposing it, as the technology targets sovereignty rules across APAC.
UiPath: AI agents force rethink of junior tech roles
Routine junior tasks could soon be handed to AI agents, forcing firms to redeploy early-career staff towards strategic work, UiPath's CEO says.
Workiva: The secret compliance and reporting arms race
Driven by improved tooling, finance teams are meeting higher standards as regulators and analysts scrutinise disclosures faster.
Filigran: Does your CISO know enough?
CISOs are under pressure to answer boardroom questions on exposure in minutes, as Filigran pushes CTEM and open-source validation tools.
Exclusive: ABBYY says AI build costs will drive buying
Enterprises could cut AI spend by up to 80% by shifting document workflows away from custom builds and into standard platforms.
Exclusive: ABBYY launches hybrid AI document models
Enterprises under pressure to curb AI risk and cost are being given a hybrid option that blends generative models with OCR and rules-based extraction.
Docusign's next move: Own the contract, not just the signature
Rapid adoption as Docusign's IAM platform cuts contract delays and turns signed agreements into AI-driven workflows.
AI transforming physical security into enterprise data solution
AI and cloud tools are turning cameras into live operational data sources, helping firms cut costs, spot errors and manage fleets centrally.
Future of AI is distributed infrastructure built on open source
Rising AI demand is exposing cloud bottlenecks, as firms eye in-house open source systems to cut costs and limit vendor lock-in.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
Trusted identity cuts across physical and logical systems
Unified identity systems can cut admin overhead and shrink attack surfaces as remote work and cyber threats blur physical and digital access.
AI will fade, says Dell Technologies' ephemeral Chief AI Officer
Dell says agentic AI should shift routine tasks below the machine line, freeing staff for expert work while making the role temporary.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
Network segmentation - you can't attack what you can't see
Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.
Lumana's focus on vertical applications for AI video surveillance platform
Lumana's Principal Product Manager says its camera-agnostic AI platform is expanding beyond security into retail, healthcare and smart cities.
CrowdStrike report: AI is rewriting rules of cybersecurity
Organisations now have just 48 hours to patch most flaws, as AI helps attackers weaponise vulnerabilities far faster than before.
Cohesity mitigating shadow AI by empowering staffers
Approved AI tools are cutting shadow use by staff, but Cohesity warns the bigger risk is corrupted enterprise knowledge and weak governance.
Expert Columns
The crown jewels of cybersecurity: What can your business not afford to lose
Address-Anchored Identity: Why Data Quality Is the Missing Link in eIDV
6 Steps to Get Property Data Ready for Real Estate Technology
The future of iGaming belongs to operators that can scale trust, not transactions
AI moves fast: are you training your people to use it wisely?
Pragmatic modernisation: The disciplines that transform cloud operations
Data Governance in the AI Era: Why One-Off Projects Fail
7 Steps to Implement Digital Identity Verification Successfully
Designing for data sovereignty: Building architectures that keep control where it belongs
Seven Cyber Controls Businesses Can No Longer Afford to Overlook
Interviews
Interviews and video coverage from the networkRecent Risk & Compliance News
Dayforce launches Build & Marketplace for HR software
Customers will be able to add custom apps and bots to Dayforce's HR platform in 2027, reducing reliance on separate software.
Remote unveils new brand identity as payroll grows 300%
Payroll demand is surging for the global platform, which said its business is up 300% year on year as it repositions its brand.
Bitdefender launches exposure management for security teams
The new tool aims to help lean security teams prioritise the most dangerous gaps before attackers can exploit them.
Most firms hide AI work in roles, Oyster report finds
Most firms are failing to update pay and titles as AI duties spread, leaving work reshaped by automation but formally unacknowledged.
Basware customers focus on trust as AI expands in finance
Finance chiefs are demanding more evidence that AI can be trusted in invoice and payment controls, as errors could affect compliance and suppliers.
Sonatype launches Nexus Repository Pro+ for AI screening
It blocks malicious or policy-breaking software and AI artefacts at intake, helping enterprises cut build failures, rework and release risk.
Fortinet launches AI security service for FortiGate
The cloud-delivered offering adds real-time prompt and response inspection to existing firewalls, helping firms curb shadow AI, data loss and runaway spend.
Cisco warns Singapore firms struggle to spot compromised AI
Just 38% of Singapore organisations feel able to detect and respond to compromised AI agents, as 89% suffered a cyber incident last year.
Netrio launches cybersecurity services for mid-market
Mid-sized firms can now buy round-the-clock monitoring, compliance and advisory support from one provider as staffing shortages widen cyber risk.
Google data agent kit automates fraud review pipeline
New payments data can now be pushed from raw logs into a fraud review queue each day, using Google Cloud services and Airflow.
Suppliers back traceability & origin verification
Suppliers are increasingly embracing traceability, with more than 85% saying transparency matters as brands face tougher scrutiny over sourcing claims.
ABBYY launches PHOENIX Plus for document automation
Enterprises can now add generative AI to Vantage workflows as ABBYY targets harder-to-read documents while keeping data within its hosted environment.
TerraPay links verify service to Kinexys Liink network
The tie-up aims to curb failed cross-border transfers by letting banks check recipient account and wallet details before sending money.
Securonix launches behavioural analytics for AI threats
With AI agents widening the attack surface, security teams need to spot abnormal activity across human and machine users before damage is done.
Darwinium adds AI agent fraud checks across journeys
Fraud teams may struggle to spot AI-driven scams and agent-led abuse as Darwinium moves to assess intent across entire digital journeys.
Interactive urges firms to tighten AI oversight rules
Businesses need tighter controls as AI adoption spreads, with Interactive urging reviews, pre-launch checks and long-term workforce planning.
DigiCert enters FedRAMP Marketplace in certification push
The listing could open the door to US federal agencies for DigiCert's certificate management tools, as it seeks Class C approval under FedRAMP 20x.
DigiCert adds Secure Releases to Software Trust Manager
The update helps teams spot newly exposed releases sooner, tying signing workflows to vulnerability data as software risks change over time.
ActiveViam partners Databricks on real-time risk analytics
Banks can now run repeatable risk calculations inside Databricks without moving data out, keeping audit trails and governance controls intact.
Tanium teams with NVIDIA to manage local AI endpoints
IT teams gain patching and compliance controls for NVIDIA's local AI systems as Tanium extends its endpoint platform beyond standard PCs.
Job Moves
Manulife promotes Andy Bruce to Chief Information Officer
Revolut names Singapore advisory board to aid Asia push
QuikBot names Howie Lau as Board Adviser for strategy
QBE names Andy Tsui to lead Hong Kong underwriting
QBE names Reuben Lee to lead Asia transactional liability
QBE Re names Soichiro Tanaka Head of Southeast Asia
QBE names Carles Tondo Head of Property for Asia
NAVEX names Nick Mitsuya as Japan Country Manager to drive growth
Lendela appoints new CFO & CTO to drive APAC expansion
