Industry
Compliance
FINRA
FINRA says its rules are technology neutral, so Rule 3110 supervision applies to generative AI today. Here is what FINRA's 2026 oversight report says to log, how AI agents and vendor AI features fit in, and what to do this quarter.
Financial ServicesSEC Regulation S-P
Your MSP already produces most of the evidence an SEC or FINRA examiner will ask for. Here is how to map monthly IT reports to written policies, review them, and keep them as compliance records.
SEC Regulation S-P
Amended Regulation S-P lets a firm skip customer notice only after a reasonable investigation rules out substantial harm or inconvenience. Here is what the SEC said a reasonable investigation involves and what the documentation file should contain.
Financial ServicesSEC Regulation S-P
Windows Server 2016 loses security updates on January 12, 2027. Here is what that means for an advisory firm's Regulation S-P safeguards and books and records, and how to retire the last server in your office without losing either.
PCI DSS
2026 is the first full year that PCI DSS Requirements 6.4.3 and 11.6.1 apply. Here is how to review the scripts on your payment pages before year-end, what the inventory should hold and what changed for SAQ A merchants.
NIST CSF 2.0
The four NIST CSF 2.0 Tiers give leadership a simple way to set next year's cybersecurity goals. Here is how to rate where your firm is today, choose a realistic target and turn the gap into a budget.
CCPA
California employees and job applicants have had full CCPA rights since 2023. What a CCPA employee privacy notice must say, how often to update the privacy policy, what changed, and what to fix before 2027.
HIPAA
OCR's Risk Analysis Initiative keeps producing HIPAA settlements, including with business associates and employer health plans. What the HIPAA risk analysis (often called a HIPAA security risk assessment) requires, what OCR expects to see, and how to check yours this quarter.
CIS Controls
The CIS Benchmark for Windows 11 gives a firm a defensible baseline for Windows 11 security hardening. How Level 1 and Level 2 differ, which settings tend to break things, and how to roll it out in stages with documented exceptions.
Law Firms
How long do attorneys have to keep files in California? No rule sets a fixed period. Here is what the State Bar expects before a year-end purge, what you can never shred, and how to destroy paper and digital copies defensibly.
Non-ProfitCCPA
Year-end giving adds donor records fast. Use your nonprofit document retention policy to decide what the IRS expects you to keep, which donor data to purge and how to delete it before December 31, 2026.
AEC
A year-end workstation refresh for architecture and engineering firms: Revit 2027 tiers, GPU needs for real-time rendering, whether an AI PC helps, security baselines, and wiping retired machines.
New articles for your industry
