InfoSec GRC Brief
Our Latest Editions
Read the GRC news worth sharing.

Howdy Friend! Welcome back to the InfoSec GRC Brief from SaltyCloud, your go-to source for curated insights on governance, risk, and compliance in...

Oct 16, 2026

Plus, NIST finalizes IR 8587, CISA and FBI publish joint critical infrastructure fact sheet, and the CIRCIA final rule slips past its September target.

Sep 30, 2026

Plus, the DoD codifies its CMMC Phase 2 suspension, IDScan breach exposes 153M driver's license scans, and NYDFS risk assessment guidance.

Sep 15, 2026

Inside Every Edition:

Regulatory & Compliance Updates: New rules, moving deadlines, and enforcement actions on CMMC, HIPAA, the EU AI Act, NIS2, CIRCIA, NIST releases, and more.

GRC Strategies: How GRC programs actually run across board reporting, AI governance, and third-party risk, plus the benchmarks worth knowing.

Cyber Incidents & Risk Implications: Breaches, ransomware, CISA KEV additions, and which controls to change.

SaltyCloud Research: Original guides and analysis on NIST CSF, 800-53, CMMC, GLBA, HIPAA, and more, all from the SaltyCloud team.

Join 1,000+ Subscribers
Get GRC news delivered straight to your inbox.
Past Editions
Social Proof
Get the InfoSec GRC Brief
Join 1,000+ CISOs, compliance officers, and risk managers who get the InfoSec GRC Brief delivered straight to their inbox, twice a month.
Let’s Chat
See the GRC Assessment Platform in action
Isora GRC is the GRC Assessment Platform™ that gives security teams one connected workspace to run assessments, manage vendors and assets, track risks, and prove compliance.
Book a Demo