The Ultimate Guide to Risk & Compliance
A curated Kiwi edition of IndustrialDay news, analysis, interviews, reviews, job moves, and related resources for Risk & Compliance.
What to know about Risk & Compliance
Risk & Compliance is a critical domain encompassing the strategies, tools, and frameworks organisations use to identify, manage, and mitigate risks while ensuring adherence to regulatory standards and internal policies. This area has grown increasingly complex with evolving technology landscapes and cyber threats, making it essential for businesses to stay informed and adaptive.
Recent developments highlight the dynamic nature of risk and compliance, including innovations like AI-powered suites enhancing governance, risk, and compliance (GRC) management, as well as emerging security challenges such as growing API vulnerabilities in financial sectors and the targeting of cloud resources by cyber-attacks. Organisations must navigate an expanding regulatory environment, with new standards and certifications marking benchmarks for data protection, operational resilience, and cybersecurity readiness.
Beyond technology, risk and compliance involve critical considerations around human factors, corporate governance, and the alignment of security practices with business objectives. Insights into cloud governance, supply chain security, and identity management demonstrate the multifaceted approach required to manage risks effectively in a digital-first world.
For readers, exploring stories tagged with Risk & Compliance offers valuable perspectives on cutting-edge solutions, regulatory changes, and strategic guidance. It is an essential resource for professionals aiming to understand and implement robust risk management frameworks, enhance cybersecurity posture, comply with evolving standards, and ultimately safeguard their organisations against the multifarious risks of today’s interconnected environment.
Kiwi Risk & Compliance News
Regional stories with direct local relevance
Pool fence receives council approval, then fails three years later
MBIE ruled the barrier still breaches the Building Code, even though Masterton District Council's fix notice was overturned on procedural grounds.
OwlQR launches QR code product platform for exporters
Exporters can now keep labels, certificates and test results in one live record, as OwlQR rolls out QR codes built on GS1 Digital Link.
Fewer WoFs, greater responsibility. Is your fleet ready for the change?
Fleet managers face greater safety responsibility as New Zealand moves eligible newer vehicles to two-yearly WoFs from 1 November.
Tairāwhiti forestry review: Crown urged to take greater responsibility
The review says local fixes will not be enough, with central government needing to help manage harvest risks and land-use transition in Tairāwhiti.
Tiger Brokers launches after-hours US options trading
New Zealand investors can now react to overnight market news in US stock options, with Tiger Trade offering direct exchange access outside regular hours.
AI boosts value of experienced developers, says Lancom CTO
AI has made prototypes cheap, but production failures remain costly, putting a premium on experienced developers who can spot hidden risks.
Analyst Insights
Research and market analysis connected to Risk & Compliance
Four Steps CISOs Can Take To Secure AI-driven Software Development
Collins urges new thinking on cybersecurity decisions
Gartner flags 10 tech trends for 2027 as AI governance
AI isn't the next cloud. Don't let it outgrow IT
Ping Identity named leader in Gartner's new CIAM report
Featured News
Twilio evolves from APIs to conversational trust
As AI agents proliferate, Twilio is focusing on trusted, governed communications infrastructure rather than the apps that sit on top of it.
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
Rising attacks on connected factories are pushing regulators to require proof of security from shipment through service, Rockwell says.
GitHub: Developers aren't disappearing. They're leveling up
AI is pushing software teams into higher-value roles, with GitHub saying developers are moving from coding to orchestration and business alignment.
The future of successful HR will use AI with human oversight
AI could free HR teams from routine admin, but Workday says sensitive hiring decisions need deterministic guardrails and explicit human oversight.
UST: Businesses must rethink how AI returns are measured
Australian firms risk spending increasing resources on AI pilots that ultimately fail to prove gains in revenue, efficiency or customer service.
Data sovereignty is a strategic imperative in the AI era
AI is pushing boards to weigh local control against cloud convenience, with 80% of respondents saying sovereignty matters more in vendor selection.
Celonis banking head: Banks want proof before scaling agents
Celonis argues frontier AI models are too generic for regulated banking, urging firms to weigh cost, risk and process gains before scaling deployments.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
VAST Data targets AI data sovereignty with DataEnclave
Enterprises and governments could run AI on sensitive data without exposing it, as the technology targets sovereignty rules across APAC.
AI demands network agility and better operational governance
Governance gaps are leaving most organisations exposed as AI traffic surges and networks struggle to keep pace with machine-speed demands.
Workiva: The secret compliance and reporting arms race
Driven by improved tooling, finance teams are meeting higher standards as regulators and analysts scrutinise disclosures faster.
Filigran: Does your CISO know enough?
CISOs are under pressure to answer boardroom questions on exposure in minutes, as Filigran pushes CTEM and open-source validation tools.
Exclusive: ABBYY says AI build costs will drive buying
Enterprises could cut AI spend by up to 80% by shifting document workflows away from custom builds and into standard platforms.
Exclusive: ABBYY launches hybrid AI document models
Enterprises under pressure to curb AI risk and cost are being given a hybrid option that blends generative models with OCR and rules-based extraction.
Why businesses need more than technology to scale AI
Only 19 per cent of enterprise AI use cases hit most or all goals, as Infosys urges firms to pair technology with data, training and governance.
Genetec: Open platforms key as physical security evolves
Businesses are prioritising hybrid, open security systems to protect existing hardware investments while adopting cloud and AI tools more gradually.
Docusign's next move: Own the contract, not just the signature
Rapid adoption as Docusign's IAM platform cuts contract delays and turns signed agreements into AI-driven workflows.
AI transforming physical security into enterprise data solution
AI and cloud tools are turning cameras into live operational data sources, helping firms cut costs, spot errors and manage fleets centrally.
QBE: Mooted critical infrastructure penalties hint at cyber regulatory future
Proposed fines of up to $5 million pushes more New Zealand firms to consider cyber cover as regulatory certainty emerges.
Future of AI is distributed infrastructure built on open source
Rising AI demand is exposing cloud bottlenecks, as firms eye in-house open source systems to cut costs and limit vendor lock-in.
AI transforms CX to go beyond the chatbot
Consumers now expect faster, more automated support as AI agents handle complex customer journeys, though many firms still struggle to prove ROI.
Governance controls are crucial for AI adoption and modernisation
Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Datadog targets enterprise risk with AI and automation
Australian enterprises are under pressure to tame AI-driven complexity, compliance risk and rising technology costs as Datadog broadens its platform.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
Trusted identity cuts across physical and logical systems
Unified identity systems can cut admin overhead and shrink attack surfaces as remote work and cyber threats blur physical and digital access.
Jamf launches AI Governance to enhance visibility, security
IT teams can now track AI models on Apple fleets to curb data leaks and token spend as businesses wrestle with shadow AI.
AI will fade, says Dell Technologies' ephemeral Chief AI Officer
Dell says agentic AI should shift routine tasks below the machine line, freeing staff for expert work while making the role temporary.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
AI adoption races ahead of governance in businesses
Only one in six staff are getting enough AI training, leaving firms exposed to poor decisions, shadow tools and weak returns.
Network segmentation - you can't attack what you can't see
Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.
Expert Columns
Data Governance in Banking: A Framework for Better Data Quality
Fewer WoFs, greater responsibility. Is your fleet ready for the change?
Digital sovereignty in practice: three examples of balancing control with global reach
Cybersecurity Awareness: The Importance of Getting the Basics Right
Why revenue leaders need a connected commerce chain
AI Investment in Australia and New Zealand Drives Data Focus
The crown jewels of cybersecurity: What can your business not afford to lose
Address-Anchored Identity: Why Data Quality Is the Missing Link in eIDV
6 Steps to Get Property Data Ready for Real Estate Technology
The future of iGaming belongs to operators that can scale trust, not transactions
Interviews
Interviews and video coverage from the network
Twilio evolves from APIs to conversational trust
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
GitHub: Developers aren't disappearing. They're leveling up
The future of successful HR will use AI with human oversight
UST: Businesses must rethink how AI returns are measured
Recent Risk & Compliance News
Forrester warns of shadow AI governance gap in Asia Pacific
One in three large Asia Pacific enterprises will struggle to govern shadow AI agents as staff-built tools outpace internal controls, Forrester says.
Australian MSPs face rising demand for AI security advice
Nearly six in 10 prospective customers are worried about AI-related threats, pushing Australian MSPs to explain cyber risk in plain language.
OneSchool Global expands Dayforce to unify workforce
The rollout should cut admin for teachers and give leaders a single view of vacancies, recruitment and compliance across 20 countries.
A1 launches AI governance service for mid-market firms
Growing regulatory scrutiny is pushing mid-market firms in Australia and New Zealand to prove who owns AI tools, what they access and how they are controlled.
Uptiq launches GovernAI for financial institutions
The tool is meant to ease board and regulator concerns by giving lenders audit trails, approvals and user controls for AI agents.
Nuix launches AI agent for forensic investigations
The new tool aims to speed legal and regulatory casework while preserving a traceable record of each AI-generated answer for scrutiny.
Forrester warns of shadow AI surge in Asia Pacific
A governance gap could leave large Asia Pacific firms exposed, with Forrester predicting shadow AI agents will outnumber approved ones by 10 to 1.
Xero expands Chaney partnership with Melio payments
The move could simplify cross-border giving and bill payment for churches, while helping Chaney & Associates add about 50 clients a year.
Google Cloud adds Anthropic-managed Claude deployment
Customers can now choose between tighter compliance controls and faster access to new Claude features on Google Cloud without changing billing.
Kyndryl & AWS launch modernisation service for firms
Many organisations are lagging on technology upgrades, and the new Kyndryl and AWS offer is meant to cut the risk of large-scale modernisation.
Compliance teams risk fines when skipping AI checks
Teams using unverified AI guidance are far more likely to be fined, with 37% of those skipping expert review reporting a penalty, survey data show.
Illumio warns AI authority is outpacing security controls
Most firms now hand AI decisions once reserved for staff, but fewer than half can fully audit its actions, a new survey found.
Logicalis wins Cisco secure networking specialisation
It gives multinational customers a single secure networking managed-service model across five markets, with plans to double that reach within six months.
Fleet adds NVIDIA AI workstations to device management
IT teams can now monitor AI workstations and deskside supercomputers alongside laptops and servers, tightening oversight as firms adopt NVIDIA hardware.
Black Kite adds quantum readiness to supplier cyber ratings
Companies can now see which suppliers are already moving towards quantum-safe encryption, as Black Kite folds the new checks into its cyber ratings.
OneAdvanced launches IQ platform in Australia & New Zealand
Organisations in regulated sectors could gain productivity without losing oversight as the platform embeds governed AI into existing workflows.
AppViewX expands Quantum Trust Hub for quantum migration
Security teams gain a standalone tool to map quantum-era cryptographic exposure across certificates, keys and software before 2030 deadlines bite.
Google Cloud pilot automates syndicated loan lifecycle
A proof of concept aims to cut settlement times and reconciliation work in syndicated lending, after modelling a USD $1.945 billion Term Loan B.
Study finds AI can use wrong document despite retrieval
Accuracy can still slip when similar records are nearby, leaving AI systems to answer from the wrong source despite finding the right document.
Sectigo survey shows quantum threat driving PKI change
Most IT and security leaders expect public key infrastructure to need major changes, as 63% worry about harvest now, decrypt later attacks.
Job Moves
Securecom appoints Head of Cyber Security & promotes Kolver
Equinox IT appoints Victoria MacLennan as director
Watson named first head of New Zealand firearms regulator
Inde appoints Nish Sudhakaran as AI & data director
Queenstown cable car appoints local GM for project
Spectrum Consulting names Darryl van Rensburg for AI drive
Payments NZ appoints Michael Ahie as Chair of Board
Airwallex names Sir Bill English chair of New Zealand board
moomoo boosts New Zealand push with hires, premium tier
