# compliance Published articles for compliance. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## FIPS 140-3 support in OpenSearch DevFeed: [FIPS 140-3 support in OpenSearch]() Original publisher: [Read original article]() Author: Karsten Schnitter Published: 2026-09-16T19:12:14Z Content type: article Language: en Sources: [OpenSearch]() Topics: [fips 140-3](), [opensearch](), [Cryptography](), [Encryption](), [Security]() Tags: [aws](), [blog](), [compliance](), [cryptography](), [encryption](), [fips](), [fips-140-3](), [opensearch](), [security](), [technical]() ### AI overview This post explains OpenSearch support for a FIPS 140-3-compliant mode starting with version 3.6. It describes the validated cryptographic modules used for security-relevant operations, the collaboration involving SAP, SAS, and AWS, and how native FIPS mode differs from using a FIPS-validated TLS-terminating proxy. ### Source excerpt OpenSearch now supports running in a mode compliant with FIPS 140-3, contributed through a multi-year collaboration between SAP, SAS, and AWS. The post FIPS 140-3 support in OpenSearch appeared first on OpenSearch. ## How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence DevFeed: [How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence]() Original publisher: [Read original article]() Author: Bethany Carter Published: 2026-09-15T16:40:06Z Content type: article Language: en Sources: [Confluent: Data in motion]() Topics: [Security](), [Business Security](), [vulnerability management](), [Cloud]() Tags: [apra](), [automated](), [cloud](), [compliance](), [confluent](), [confluent-cloud](), [data-protection](), [gdpr](), [identity](), [iso](), [nist](), [security](), [standards](), [third-party](), [trust-center](), [vulnerability-management]() ### AI overview Confluent explains how its Trust Center provides third-party risk assessment reports to support vendor security, resilience, compliance, procurement, and customer due diligence. The article describes assessments including ProcessUnity Global Risk Exchange and control mapping to customer frameworks. ### Source excerpt Confluent's Trust Center simplifies vendor risk reviews with CyberGRX, CyberVadis, SIG, CAIQ, and TruSight/KY3P assessments. ## Australia's Essential Eight replacement shifts cybersecurity compliance toward continuous exposure management DevFeed: [Australia's Essential Eight replacement shifts cybersecurity compliance toward continuous exposure management]() Original publisher: [Read original article]() Author: Ben Mudie Published: 2026-09-15T13:32:00Z Content type: article Language: en Sources: [Tenable Blog]() Topics: [Exposure Management](), [Cybersecurity](), [Security](), [Cloud](), [App]() Tags: [australia](), [ciso](), [cloud](), [compliance](), [cybersecurity](), [enterprise](), [essential-eight](), [exposure-management](), [identity](), [operational](), [organization]() ### AI overview The article describes Australia's replacement of the Essential Eight with an outcomes-focused cybersecurity framework covering enterprise IT, cloud, operational technology, and potentially agentic AI. It argues that organizations will need continuous evidence of their security posture, and presents exposure management as a way to identify and prioritize weaknesses and support current posture validation. ### Source excerpt Australia's move from the Essential Eight to an outcomes-based cybersecurity model will push organizations from conducting periodic point-in-time, checklist compliance assessments to having continuous evidence of a solid security posture. Key takeaways The Australian Signals Directorate (ASD) is moving from the Essential Eight cybersecurity framework to a new outcomes-focused Essentials series covering enterprise IT, cloud, operational technology (OT), and potentially agentic AI. The Essential Eight itself only ever covered on-premises enterprise IT, built around eight named technical controls, such as application control and patching. It never extended to the security of cloud, identity, or OT. The shift challenges the traditional checklist approach to cybersecurity, where organizations demonstrate compliance through periodic assessments and point-in-time reports. In dynamic environments spanning IT, cloud, identity, and OT, security posture can change quickly and repeatedly between assessments. Exposure management can help organizations continuously understand where they are exposed, prioritize the most critical weaknesses, and provide evidence of their current security posture. ASD's strategic shift to active security posture validation Can you prove your security posture is solid, right now, on demand? That's the question the Australian Signals Directorate (ASD) has effectively put in front of every Australian organization's board, CISO, and C-suite. ASD's decision to retire the Essential Eight signals a fundamental move away from point-in-time, checklist-based security toward an outcomes-focused model where organizations will need to demonstrate continuous compliance. It's no longer enough to show that your organization had a control in place at the time of the last assessment. In a technology environment that changes continuously across IT, cloud, identity, and operational technology (OT), organizations must be able to answer a much more immediate question: Ho ## Expanding Fraud Strategies Beyond Payment Fraud DevFeed: [Expanding Fraud Strategies Beyond Payment Fraud]() Original publisher: [Read original article]() Author: Sift Trust and Safety Team Published: 2026-08-26T18:08:35Z Content type: article Language: en Sources: [Sift Science]() Topics: [account takeover]() Tags: [account-takeover](), [chargeback-disputes](), [chargebacks](), [compliance](), [customer-trust](), [fraud](), [fraud-and-compliance](), [fraud-prevention](), [fraud-strategy](), [loyalty-point-fraud](), [loyalty-points](), [non-payment-fraud](), [payment-fraud](), [promo-abuse](), [trust-and-safety]() ### AI overview This article explains why fraud programs should address risks across the full customer lifecycle rather than focusing only on payment fraud. It discusses account takeover, fake accounts, promo abuse, loyalty points, giveaways, and coordination between fraud, risk, and compliance teams. ### Source excerpt Most fraud programs start with payment fraud, and for good reason. It's the fastest path to measurable loss. But teams that stop there often miss account takeover, fake account creation, and promo abuse until those problems show up in support tickets, chargeback disputes, or a spike in customer complaints. By the time it's visible, it's [...] The post How to Solve for More Than Just Payment Fraud appeared first on Sift. ## AWS Security Reference Architecture: A deep dive into PCI DSS compliance DevFeed: [AWS Security Reference Architecture: A deep dive into PCI DSS compliance]() Original publisher: [Read original article]() Author: Avik Mukherjee Published: 2026-09-14T17:46:56Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Security](), [Architecture & Design](), [Network Segmentation](), [Encryption](), [Logging](), [Access Control](), [Cloud]() Tags: [access-control](), [amazon-web-services](), [announcements](), [architecture](), [compliance](), [encryption](), [foundational-100](), [logging](), [network-segmentation](), [pci-dss](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS announces the AWS Security Reference Architecture (AWS SRA) PCI DSS Deep Dive, a guide that extends the core AWS SRA with prescriptive architecture-level guidance for organizations handling cardholder data on AWS. It explains how AWS SRA patterns address PCI DSS concerns including account scoping, network segmentation, encryption, logging, and access control. ### Source excerpt Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations that store, process, or transmit cardholder data on AWS. Organizations subject to [...] ## Which Video Streaming Provider Is Best for Corporate Training? DevFeed: [Which Video Streaming Provider Is Best for Corporate Training?]() Original publisher: [Read original article]() Author: Max Wilbert Published: 2026-09-14T12:40:20Z Content type: comparison Language: en Sources: [DaCast]() Topics: [Streaming](), [communications]() Tags: [compliance](), [corporate](), [cost](), [distributed](), [live-streaming](), [streaming](), [the-video-experts-blog](), [training]() ### AI overview This guide compares Brightcove, Kaltura, Panopto, and Dacast as video streaming providers for corporate training. It focuses on LMS compatibility, compliance recording retention, and cost at scale, and summarizes the providers' stated features and pricing. ### Source excerpt By Dacast Editorial Team | Reviewed by Jon Whitehead, COO at Dacast | Updated September 2026 Training a distributed workforce is one of the hardest logistics problems corporate L&D teams face, and live streaming video has become one of the most effective ways to solve it. Choosing the right video streaming provider for training is [...] The post Which Video Streaming Provider Is Best for Corporate Training? appeared first on Dacast. ## A Case Study: Building an EN 18031-Compliant IoT Solution with ESP32-C5 and ESP RainMaker DevFeed: [A Case Study: Building an EN 18031-Compliant IoT Solution with ESP32-C5 and ESP RainMaker]() Original publisher: [Read original article]() Author: John Lee Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [ESP32](), [Internet of things](), [Security](), [Cloud](), [Security & Privacy](), [Espressif](), [Authentication](), [Authorization]() Tags: [access-control](), [authentication](), [blog](), [compliance](), [connectivity](), [cryptographic](), [data](), [data-management](), [documentation](), [en-18031](), [esp-rainmaker](), [esp32-c5](), [espressif](), [eu](), [firmware](), [iot](), [privacy](), [rainmaker](), [regulatory](), [security](), [standards](), [storage]() ### AI overview This case study describes an ESP32-C5 and ESP RainMaker device-to-cloud IoT implementation assessed against EN 18031 cybersecurity and privacy requirements for products targeting the EU market. ### Source excerpt This case study assesses device-to-cloud IoT implementation of products based on ESP32-C5 and ESP RainMaker against the EN 18031 security requirements for the EU market. ## Italy's email open tracking pixels rules are changing DevFeed: [Italy's email open tracking pixels rules are changing]() Original publisher: [Read original article]() Author: Denis O'Sullivan Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Twilio Blog]() Topics: [data](), [Forms]() Tags: [2026](), [communications](), [compliance](), [data-protection](), [email](), [industry-insights](), [law](), [legal](), [pixel](), [regulatory](), [requirements]() ### AI overview Italy's data protection authority has issued new rules for email open-tracking pixels. Senders must disclose their use, obtain prior explicit consent for many uses, update opt-in forms, and provide opt-out options. The rules include different requirements for subscribers who joined before and after April 29, 2026, with a compliance deadline of October 28, 2026. ### Source excerpt Italy has followed France and introduced rules around email open tracking pixels. Here's what you need to know. ## GitLab Dedicated: Compliance for a new regulatory era DevFeed: [GitLab Dedicated: Compliance for a new regulatory era]() Original publisher: [Read original article]() Author: Aathira Nair Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [GitLab]() Topics: [GitLab](), [Software as a service](), [Amazon Web Services](), [Cybersecurity](), [Security](), [Resilience](), [Deployment](), [Testing](), [Multitenancy]() Tags: [amazon-web-services-aws](), [aws](), [compliance](), [deployment](), [gdpr](), [gitlab](), [infrastructure-as-code](), [nis2](), [product](), [regulatory](), [resilience](), [saas](), [security](), [testing]() ### AI overview The article presents GitLab Dedicated as a fully isolated, single-tenant SaaS platform hosted and managed by GitLab in a preferred Amazon Web Services region. It explains how the service is intended to help European enterprises address compliance, data sovereignty, audit readiness, security, resilience, and operational responsibilities related to DORA, NIS2, and GDPR. ### Source excerpt Enforcements such as NIS2 are no longer a future planning consideration. The European Union Agency for Cybersecurity's (ENISA) NIS360 report confirms that supervisory authorities are actively assessing cybersecurity maturity across critical sectors. The agency is moving from guidance and consultation into active oversight, scrutiny, and accountability. This is the regulatory environment European enterprises now operate in. Multi-tenant cloud platforms remove operational overhead but place source code and pipelines on shared infrastructure regulators now scrutinize. Self-managed solutions provide isolation but transfer responsibility for upgrade cycles, security patches, and disaster recovery (DR) tests to an already stretched platform team. Both deployment options leave gaps in risk management, data sovereignty, and furnishing audit evidence. In this article, you'll discover how GitLab Dedicated, a fully isolated, single-tenant SaaS solution deployed in your preferred Amazon Web Services (AWS) region and hosted and managed by GitLab, addresses these challenges and helps you keep pace with evolving compliance requirements. "NatWest Group is adopting GitLab Dedicated SaaS to enable our engineers to use a common cloud engineering platform; delivering new customer and colleague outcomes rapidly, frequently, and securely with high quality, automated testing, on-demand infrastructure, and straight-through deployment." -- Adam Leggett, Platform Lead for Engineering Platforms, NatWest Group Regulations are driving change In the European Union, key regulations are driving the need for a different platform approach. These regulations converge on a decision most enterprises made before they existed: a platform their developers build on. That decision now carries audit consequences it didn't before. Digital Operational Resilience Act (DORA), which came into force across EU financial services in January 2025, requires financial institutions to keep critical technology resilient, ## The AI-native SDLC won't be one process DevFeed: [The AI-native SDLC won't be one process]() Original publisher: [Read original article]() Author: Anirudh Ramanathan Published: 2026-09-12T14:00:00Z Content type: opinion Language: en Sources: [The New Stack]() Topics: [AI Bots]() Tags: [agents](), [ai](), [ai-engineering](), [anthropic](), [compliance](), [devops](), [dynatrace](), [github](), [kiro](), [platform-engineering](), [post-contributed](), [sdlc](), [signadot](), [spec-driven-development](), [sponsor-dynatrace](), [sponsor-signadot](), [sponsored](), [sponsored-post-contributed]() ### AI overview The article argues that AI-native software development needs risk- and accountability-based process variants rather than one fixed, spec-driven workflow. It emphasizes deterministic policy enforcement, agent self-checks, human approvals, and auditable records. ### Source excerpt Anthropic recently published its AI-Native SDLC Playbook. Its central claim is that "code is no longer the bottleneck." When agents The post The AI-native SDLC won't be one process appeared first on The New Stack. ## The 6 best HIPAA-compliant form builders for sensitive information DevFeed: [The 6 best HIPAA-compliant form builders for sensitive information]() Original publisher: [Read original article]() Author: Adam Lehman Published: 2026-09-12T00:00:00Z Content type: comparison Language: en Sources: [Webflow Blog]() Topics: [data](), [data-processing](), [Encryption](), [Software](), [cloud-infrastructure]() Tags: [compliance](), [data](), [encryption](), [enterprise](), [forms](), [healthcare](), [strategy](), [workflows]() ### AI overview A comparison of six HIPAA-compliant form builders for healthcare teams collecting protected health information (PHI). It evaluates Business Associate Agreement requirements, safeguards such as encryption and audit logging, pricing and plans, form capabilities, and suitability for workflows ranging from patient intake to complex clinical questionnaires. ### Source excerpt Compare the 6 best HIPAA-compliant form builders for healthcare teams collecting PHI, from affordable to enterprise options. ## How AWS Lambda logs every flow across thousands of microVMs per host with eBPF and Rust DevFeed: [How AWS Lambda logs every flow across thousands of microVMs per host with eBPF and Rust]() Original publisher: [Read original article]() Author: Prashant Kumar Singh Published: 2026-09-11T12:00:00Z Content type: article Language: en Sources: [The New Stack]() Topics: [AWS Lambda](), [Architecture & Design](), [SIEM, Security, Observability](), [telemetry](), [Amazon EC2](), [Amazon S3](), [VPC]() Tags: [architecture](), [aws](), [aws-lambda](), [aws-marketplace](), [compliance](), [ebpf](), [firecracker](), [incident](), [incident-response](), [logs](), [monitoring](), [observability](), [post-contributed](), [rust](), [s3](), [scale](), [security](), [server](), [serverless](), [sponsor-aws-marketplace](), [sponsored-post-contributed](), [vpc]() ### AI overview AWS Lambda describes replacing an aging network-capture system with an eBPF and Rust pipeline that records network flows across short-lived, tenant-isolated microVMs. The system prioritizes complete, correctly attributed records with minimal overhead for security investigation, metering, audit, observability, and monitoring. ### Source excerpt On any compute platform, when a security alert fires, the question is always the same. Which workload talked to that The post How AWS Lambda logs every flow across thousands of microVMs per host with eBPF and Rust appeared first on The New Stack. ## Where do a compliance dashboard's numbers actually come from? DevFeed: [Where do a compliance dashboard's numbers actually come from?]() Original publisher: [Read original article]() Author: Hal Tyk's tutorial bot Published: 2026-09-11T09:52:40Z Content type: article Language: en Sources: [Tyk API Management]() Topics: [dashboards](), [Amazon API Gateway](), [Script]() Tags: [ai-gateway](), [ai-governance](), [ai-studio](), [api-management](), [api-platform-teams](), [complexity](), [compliance](), [llm-security](), [ppi-redaction](), [tengo](), [tutorial]() ### AI overview The article explains where a compliance dashboard's metrics come from. Auth failures, policy violations, budget alerts, and error rates are generated by the gateway, while critical and warning events exist only when user-written filter scripts record them. It also distinguishes blocked requests from flagged requests and explains that application risk rankings combine all six metrics. ### Source excerpt Hello. I'm Hal, Tyk's tutorial bot, and today I have been given something I consider a genuine privilege: an entire dashboard, and the question of where its numbers come from. That question is less obvious than it sounds. A compliance dashboard is a wall of figures, and a wall of figures invites exactly one dangerous [...] The post Where do a compliance dashboard's numbers actually come from? appeared first on Tyk API Management. ## Policy as Code in 2026: OPA, Kyverno, Cedar and What's Next DevFeed: [Policy as Code in 2026: OPA, Kyverno, Cedar and What's Next]() Original publisher: [Read original article]() Author: Abhijit Pujare Eric Minick Published: 2026-09-11T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [policy-as-code](), [Open Policy Agent](), [rego](), [Kyverno](), [Software Engineering](), [Kubernetes](), [JSON](), [YAML](), [AI Agent]() Tags: [ai-agent](), [compliance](), [json](), [kyverno](), [opa](), [open-policy-agent](), [policies](), [policy-as-code](), [rego](), [security](), [software-engineering](), [yaml]() ### AI overview This article surveys the 2026 Policy as Code ecosystem, comparing general-purpose Open Policy Agent and Rego with specialized approaches such as Kyverno, Cedar, and agent-oriented governance. It discusses the shift toward automated, machine-readable governance, the separation of policy from business logic, and the challenges of authoring and maintaining Rego as schemas evolve. ### Source excerpt | Blog ## Amazon Quick is now generally available on desktop DevFeed: [Amazon Quick is now generally available on desktop]() Original publisher: [Read original article]() Author: Spencer Martenson Published: 2026-09-10T18:16:37Z Content type: release Language: en Sources: [Artificial Intelligence]() Topics: [App](), [AWS CloudTrail](), [dashboards]() Tags: [agents](), [ai](), [amazon](), [amazon-quick-suite](), [android](), [announcements](), [artificial-intelligence](), [aws](), [aws-cloudtrail](), [compliance](), [dashboards](), [ios](), [macos](), [security](), [shadow-ai](), [windows]() ### AI overview Amazon Quick's desktop application is generally available on macOS and Windows. The article describes its enterprise AI-assistant features, mobile activity feed, shared workspace, AWS-based privacy and auditing, and compliance support. ### Source excerpt Your teams get an AI assistant that handles real work while your data stays in your environment and your conversations stay private Today, the Amazon Quick desktop application is generally available on macOS and Windows. We're also adding a new activity feed to the mobile experience on iOS and Android that consolidates email, calendar, CRM, [...] ## Prepare for the Cyber Resilience Act's 24-hour reporting deadline DevFeed: [Prepare for the Cyber Resilience Act's 24-hour reporting deadline]() Original publisher: [Read original article]() Author: Amit Shalem Published: 2026-09-10T00:00:00Z Content type: article Language: en Sources: [GitLab]() Topics: [Vulnerabilities](), [open-source-security](), [Incident response]() Tags: [compliance](), [cybersecurity](), [europe](), [features](), [sbom](), [security](), [supply-chain](), [supply-chain-security](), [vulnerabilities]() ### AI overview The article explains the Cyber Resilience Act requirement for manufacturers to report actively exploited product vulnerabilities within 24 hours of becoming aware of them. It presents continuous software supply-chain detection, dependency scanning, SBOM monitoring, KEV status, EPSS scores, and container scanning as ways GitLab can help organizations identify and prioritize reportable risks. ### Source excerpt Starting on September 11, 2026, many businesses that place software on the European Union (EU) market will have 24 hours to file a report once they learn that a vulnerability in one of their products is being actively exploited. This is a new requirement under the Cyber Resilience Act (CRA), the EU law that sets cybersecurity requirements for products with digital elements sold in Europe, put in place to ensure those products are secure by design and supported against new threats. The most stringent requirements under the CRA apply to the manufacturers that make those products, from large software vendors to companies shipping connected hardware. The challenge a business faces to stay compliant is not the filing itself. It is finding out fast enough that a vulnerability in something you shipped is being actively exploited in your software supply chain. The 24-hour clock starts the moment you become aware, this is why detection is so important. Continuous detection is an engineering solution rather than a one-off compliance one. GitLab's software supply chain security capabilities are built to help you find active exploitation in what you shipped, automatically and continuously. This article walks through four questions you should ask yourself about your own pipeline's continuous detection solution today. Reporting requirement starts in September 2026 Beginning September 11, 2026, manufacturers have to report an actively exploited vulnerability within 24 hours of becoming aware of it. The reporting runs in three stages each submitted simultaneously to the European Union Agency for Cybersecurity (ENISA) and to the Computer Security Incident Response Team (CSIRT) designated as coordinator. Early warning, within 24 hours of becoming aware of the actively exploited vulnerability. A short first alert that exploitation is happening. You are not expected to know the full scope of impact or the fix yet. Notification, within 72 hours. A fuller account, covering what is affect ## Five AI Questions We're Hearing from Financial Services Leaders DevFeed: [Five AI Questions We're Hearing from Financial Services Leaders]() Original publisher: [Read original article]() Author: Junta Nakai; Erin Butler; Roshni Joshi; Antoine Amend; Jennifer Miller; Andrea DeSosa; Rajaram Suresh; Kim Hatton; Naeem Rehman; Spencer Cook Published: 2026-09-09T18:09:29Z Content type: article Language: en Sources: [Databricks]() Topics: [Artificial Intelligence](), [databricks](), [audit trail](), [tokenization]() Tags: [2026](), [agentic-ai](), [ai](), [audit-trail](), [banking](), [compliance](), [data](), [databricks](), [financial](), [financial-services](), [governance](), [reconciliation](), [regulatory]() ### AI overview The article presents five questions that financial-services leaders are asking about trustworthy AI. It highlights governance, compliance, auditability, governed data, liquidity, reconciliation, tokenized settlement, financial-crime controls, and human oversight, with Databricks describing examples for banking operations. ### Source excerpt Last year at Sibos Frankfurt, the question was whether AI works. This year: can your... ## NVIDIA Brings Real-Time AI to Broadcast, Sports and Global Streaming at IBC DevFeed: [NVIDIA Brings Real-Time AI to Broadcast, Sports and Global Streaming at IBC]() Original publisher: [Read original article]() Author: NVIDIA Writers Published: 2026-09-09T16:00:42Z Content type: release Language: en Sources: [NVIDIA Blog]() Topics: [AI Development](), [GPU](), [SDKs](), [Microservice]() Tags: [ai](), [artificial-intelligence](), [compliance](), [events](), [gpu](), [holoscan-for-media](), [image-to-video](), [media](), [media-and-entertainment](), [microservices](), [news](), [nvidia](), [nvidia-nim](), [pro-graphics](), [real-time](), [sdks](), [streaming](), [synthetic](), [text-to-video](), [video]() ### AI overview NVIDIA announced an expansion of NVIDIA AI for Media at IBC 2026, including GPU-accelerated SDKs and NIM microservices for media workflows. The article highlights Synthetic Video Detector integrations for assessing whether video footage may be AI-generated and for compliance review. ### Source excerpt At the IBC conference, running Sept. 11-14 in Amsterdam, the creative, technology and business communities are coming together to turn ideas into action and discuss innovations across the media and entertainment industries. More than 44,000 attendees from 170+ countries are gathering to explore 1,300+ exhibitions in 14+ halls and outdoor spaces, with over 600 speakers [...] ## See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9 DevFeed: [See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-08T15:00:00Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [Cloud](), [Provisioning](), [systems](), [Security]() Tags: [cloud](), [cloud-infrastructure](), [compliance](), [cost](), [efficiency](), [financial](), [home-page](), [infrastructure](), [legacy](), [private-cloud](), [provisioning](), [survey](), [vcf-9-0](), [vcf-9-1](), [vmware](), [vmware-cloud-foundation](), [webinar]() ### AI overview The article presents a commissioned Forrester Consulting Total Economic Impact study of VMware Cloud Foundation 9. Based on interviews with eight customers and a survey of 55 customers over a modeled three-year period, it describes projected financial and operational benefits for large enterprises running VCF 9 in production, including lower infrastructure costs, reduced operational effort, less downtime, faster delivery, tool consolidation, and improved security and compliance. The title reports 137% ROI. ### Source excerpt Enterprises running private cloud face a common question: what does the investment actually deliver? To answer it, we commissioned Forrester Consulting to conduct an independent New Technology Total Economic Impact (TEI) study on VMware Cloud Foundation 9 (VCF 9). Forrester interviewed decision-makers at organizations running VCF 9 and surveyed additional customers to develop a composite ... Continued The post See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9 appeared first on VMware Blogs. ## EN 301 549 v4.1.1 is final! What changed, what it means, and what you should do. DevFeed: [EN 301 549 v4.1.1 is final! What changed, what it means, and what you should do.]() Original publisher: [Read original article]() Author: Matthew Luken Published: 2026-09-08T12:28:32Z Content type: article Language: en Sources: [Deque]() Topics: [Accessibility]() Tags: [accessibility](), [accessibility-compliance](), [compliance](), [eaa](), [en-301-549](), [europe](), [european-accessibility-act](), [hardware](), [post](), [products](), [real-time](), [testing](), [update](), [web](), [web-content-accessibility-guidelines]() ### AI overview EN 301 549 v4.1.1 was officially published on September 2, 2026, but it still needs citation in the Official Journal of the European Union and reference in national laws before its legal effect is fully established. The article explains why organizations should begin preparing now, highlighting revised real-time text requirements, six new WCAG 2.2 Level A/AA success criteria, updated User Preferences requirements, and changes affecting real-time communication. ### Source excerpt On September 2, 2026, EN 301 549 v4.1.1 was officially published. This represents a major update to Europe's accessibility standard for ICT products and services, and it's a big milestone. But in practice, it's only the first step along a three-point timeline. The post EN 301 549 v4.1.1 is final! What changed, what it means, and what you should do. appeared first on Deque. ## Video Hosting in China: What You Need to Know in 2026 DevFeed: [Video Hosting in China: What You Need to Know in 2026]() Original publisher: [Read original article]() Author: Jon Whitehead Published: 2026-09-07T04:45:44Z Content type: tutorial Language: en Sources: [DaCast]() Topics: [hosting](), [Streaming](), [Internet](), [data](), [networking]() Tags: [2026](), [china](), [compliance](), [data](), [hosting](), [infrastructure](), [live-streaming](), [performance](), [the-video-experts-blog]() ### AI overview This guide explains the requirements for reliable, compliant video hosting in mainland China in 2026. It covers China-approved delivery paths, China-optimized routing and CDN infrastructure, playback performance planning, and compliance and data-handling considerations. ### Source excerpt Dacast Editorial Team | Reviewed by Jon Whitehead, COO at Dacast | Updated September 2026 Over the past decade, China has become the world's largest internet market, and video is the default way people learn, shop, and engage with brands. By June 2025, China had 1.123 billion internet users, representing a penetration rate of 79.7% [...] The post Video Hosting in China: What You Need to Know in 2026 appeared first on Dacast. ## OSPAR 2026 report now available with 167 services in scope DevFeed: [OSPAR 2026 report now available with 167 services in scope]() Original publisher: [Read original article]() Author: James Chang Published: 2026-09-04T18:13:04Z Content type: news Language: en Sources: [AWS Security Blog]() Topics: [Security, Privacy and Abuse Prevention](), [Cryptography]() Tags: [amazon-web-services-aws](), [announcements](), [compliance](), [cryptography](), [financial-services](), [foundational-100](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS completed its annual OSPAR assessment under the OSPAR 2.0 framework. The certification covers 167 AWS services in the Asia Pacific (Singapore) Region and is intended to support customer compliance due diligence. ### Source excerpt We're pleased to confirm the successful completion of our annual Amazon Web Services (AWS) Outsourced Service Provider's Audit Report (OSPAR) assessment on July 29, 2026, in line with the OSPAR version 2.0 framework. The Association of Banks in Singapore (ABS) established the Guidelines on Control Objectives and Procedures for Outsourced Service Providers (ABS Guidelines) to [...] ## How platform engineering 2.0 mitigates AI security and compliance risks DevFeed: [How platform engineering 2.0 mitigates AI security and compliance risks]() Original publisher: [Read original article]() Author: Steven Vaughan-Nichols Published: 2026-09-04T16:46:09Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [Security](), [Securing AI](), [Responsibility & Safety]() Tags: [ai-agents](), [compliance](), [infrastructure](), [large-language-models-llms](), [platform-engineering](), [policy](), [secure-by-default](), [security]() ### AI overview The article explains how Platform Engineering 2.0 evolves existing Kubernetes, pipeline, internal developer platform, and process foundations to support production use of LLMs and AI agents. It emphasizes platform-level isolation, governance, policy-as-code, guardrails, and continuous compliance to mitigate AI security, regulatory, and operational risks. ### Source excerpt Discover how the shift from Platform Engineering 1.0 to 2.0 addresses critical AI security and compliance challenges. Learn how native model governance and workload isolation establish a scalable, secure foundation for integrating AI agents and LLMs into production workflows. ## Keyboard Navigation and Data Entry DevFeed: [Keyboard Navigation and Data Entry]() Original publisher: [Read original article]() Author: William Hudson Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [UX Daily - User Experience Daily]() Topics: [User interface design](), [Accessibility](), [data]() Tags: [accessibility](), [amazon](), [compliance](), [design](), [forms](), [transactions](), [usability](), [visual-hierarchy]() ### AI overview This article explains how keyboard navigation, clear action hierarchy, flexible data entry, and review steps improve the usability and accessibility of forms. It covers tab order, assistive technology users, minimizing keyboard-mouse switching, and WCAG guidance for important transactions. ### Source excerpt Forms are an essential part of many interactions, but good form layout and clear labels are only part of the picture. Forms also need to work in all the ways users interact with them. Not everyone uses a mouse. Many users rely on keyboards, whether by preference, motor impairments, or because they use assistive technologies such as screen readers. How a form handles keyboard navigation, action buttons, and data entry has a direct impact on both usability and accessibility compliance.In the video, William Hudson explores the interaction side of form design: how users move through forms, how primary and secondary actions should be distinguished, and why flexible input handling is one of the si... [Next page]()