The Ultimate Guide to Risk & Compliance
A curated Kiwi edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Risk & Compliance.
What to know about Risk & Compliance
Risk & Compliance is a critical domain encompassing the strategies, tools, and frameworks organisations use to identify, manage, and mitigate risks while ensuring adherence to regulatory standards and internal policies. This area has grown increasingly complex with evolving technology landscapes and cyber threats, making it essential for businesses to stay informed and adaptive.
Recent developments highlight the dynamic nature of risk and compliance, including innovations like AI-powered suites enhancing governance, risk, and compliance (GRC) management, as well as emerging security challenges such as growing API vulnerabilities in financial sectors and the targeting of cloud resources by cyber-attacks. Organisations must navigate an expanding regulatory environment, with new standards and certifications marking benchmarks for data protection, operational resilience, and cybersecurity readiness.
Beyond technology, risk and compliance involve critical considerations around human factors, corporate governance, and the alignment of security practices with business objectives. Insights into cloud governance, supply chain security, and identity management demonstrate the multifaceted approach required to manage risks effectively in a digital-first world.
For readers, exploring stories tagged with Risk & Compliance offers valuable perspectives on cutting-edge solutions, regulatory changes, and strategic guidance. It is an essential resource for professionals aiming to understand and implement robust risk management frameworks, enhance cybersecurity posture, comply with evolving standards, and ultimately safeguard their organisations against the multifarious risks of today’s interconnected environment.
Kiwi Risk & Compliance News
Regional stories with direct local relevance
OwlQR launches QR code product platform for exporters
Exporters can now keep labels, certificates and test results in one live record, as OwlQR rolls out QR codes built on GS1 Digital Link.
Fewer WoFs, greater responsibility. Is your fleet ready for the change?
Fleet managers face greater safety responsibility as New Zealand moves eligible newer vehicles to two-yearly WoFs from 1 November.
Tairāwhiti forestry review: Crown urged to take greater responsibility
The review says local fixes will not be enough, with central government needing to help manage harvest risks and land-use transition in Tairāwhiti.
Tiger Brokers launches after-hours US options trading
New Zealand investors can now react to overnight market news in US stock options, with Tiger Trade offering direct exchange access outside regular hours.
AI boosts value of experienced developers, says Lancom CTO
AI has made prototypes cheap, but production failures remain costly, putting a premium on experienced developers who can spot hidden risks.
Pipes or paperwork? Mayor says councils burdened by rising audit fees
Waimakariri ratepayers could face nearly $500,000 in annual audit costs, as the mayor says the money is being diverted from core services.
Analyst Insights
Research and market analysis connected to Risk & Compliance
AI isn't the next cloud. Don't let it outgrow IT
Ping Identity named leader in Gartner's new CIAM report
Annexa: NetSuite Next is a flick of a switch. Rewiring the CFO takes longer
Anthropic adds 11 partners to Claude for financial advisers
Syndigo named leader in Gartner's first PIM quadrant
Featured News
Twilio evolves from APIs to conversational trust
As AI agents proliferate, Twilio is focusing on trusted, governed communications infrastructure rather than the apps that sit on top of it.
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
Rising attacks on connected factories are pushing regulators to require proof of security from shipment through service, Rockwell says.
GitHub: Developers aren't disappearing. They're leveling up
AI is pushing software teams into higher-value roles, with GitHub saying developers are moving from coding to orchestration and business alignment.
The future of successful HR will use AI with human oversight
AI could free HR teams from routine admin, but Workday says sensitive hiring decisions need deterministic guardrails and explicit human oversight.
UST: Businesses must rethink how AI returns are measured
Australian firms risk spending increasing resources on AI pilots that ultimately fail to prove gains in revenue, efficiency or customer service.
Data sovereignty is a strategic imperative in the AI era
AI is pushing boards to weigh local control against cloud convenience, with 80% of respondents saying sovereignty matters more in vendor selection.
Celonis banking head: Banks want proof before scaling agents
Celonis argues frontier AI models are too generic for regulated banking, urging firms to weigh cost, risk and process gains before scaling deployments.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
VAST Data targets AI data sovereignty with DataEnclave
Enterprises and governments could run AI on sensitive data without exposing it, as the technology targets sovereignty rules across APAC.
AI demands network agility and better operational governance
Governance gaps are leaving most organisations exposed as AI traffic surges and networks struggle to keep pace with machine-speed demands.
Workiva: The secret compliance and reporting arms race
Driven by improved tooling, finance teams are meeting higher standards as regulators and analysts scrutinise disclosures faster.
Filigran: Does your CISO know enough?
CISOs are under pressure to answer boardroom questions on exposure in minutes, as Filigran pushes CTEM and open-source validation tools.
Exclusive: ABBYY says AI build costs will drive buying
Enterprises could cut AI spend by up to 80% by shifting document workflows away from custom builds and into standard platforms.
Exclusive: ABBYY launches hybrid AI document models
Enterprises under pressure to curb AI risk and cost are being given a hybrid option that blends generative models with OCR and rules-based extraction.
Why businesses need more than technology to scale AI
Only 19 per cent of enterprise AI use cases hit most or all goals, as Infosys urges firms to pair technology with data, training and governance.
Genetec: Open platforms key as physical security evolves
Businesses are prioritising hybrid, open security systems to protect existing hardware investments while adopting cloud and AI tools more gradually.
Docusign's next move: Own the contract, not just the signature
Rapid adoption as Docusign's IAM platform cuts contract delays and turns signed agreements into AI-driven workflows.
AI transforming physical security into enterprise data solution
AI and cloud tools are turning cameras into live operational data sources, helping firms cut costs, spot errors and manage fleets centrally.
QBE: Mooted critical infrastructure penalties hint at cyber regulatory future
Proposed fines of up to $5 million pushes more New Zealand firms to consider cyber cover as regulatory certainty emerges.
Future of AI is distributed infrastructure built on open source
Rising AI demand is exposing cloud bottlenecks, as firms eye in-house open source systems to cut costs and limit vendor lock-in.
AI transforms CX to go beyond the chatbot
Consumers now expect faster, more automated support as AI agents handle complex customer journeys, though many firms still struggle to prove ROI.
Governance controls are crucial for AI adoption and modernisation
Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Datadog targets enterprise risk with AI and automation
Australian enterprises are under pressure to tame AI-driven complexity, compliance risk and rising technology costs as Datadog broadens its platform.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
Trusted identity cuts across physical and logical systems
Unified identity systems can cut admin overhead and shrink attack surfaces as remote work and cyber threats blur physical and digital access.
Jamf launches AI Governance to enhance visibility, security
IT teams can now track AI models on Apple fleets to curb data leaks and token spend as businesses wrestle with shadow AI.
AI will fade, says Dell Technologies' ephemeral Chief AI Officer
Dell says agentic AI should shift routine tasks below the machine line, freeing staff for expert work while making the role temporary.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
AI adoption races ahead of governance in businesses
Only one in six staff are getting enough AI training, leaving firms exposed to poor decisions, shadow tools and weak returns.
Network segmentation - you can't attack what you can't see
Fast-moving exploits are shrinking patch windows to hours, making network segmentation vital for protecting cameras, medical devices and other connected assets.
SAS Innovate: New era of scams requires novel solutions
Australians are losing billions as AI-driven fraud pushes banks, telcos and platforms to share scam data faster and stop payments earlier.
Expert Columns
Fewer WoFs, greater responsibility. Is your fleet ready for the change?
Digital sovereignty in practice: three examples of balancing control with global reach
Cybersecurity Awareness: The Importance of Getting the Basics Right
Why revenue leaders need a connected commerce chain
AI Investment in Australia and New Zealand Drives Data Focus
The crown jewels of cybersecurity: What can your business not afford to lose
Address-Anchored Identity: Why Data Quality Is the Missing Link in eIDV
6 Steps to Get Property Data Ready for Real Estate Technology
The future of iGaming belongs to operators that can scale trust, not transactions
AI moves fast: are you training your people to use it wisely?
Interviews
Interviews and video coverage from the network
Twilio evolves from APIs to conversational trust
'Cybersecurity birth certificate': Rockwell Automation's OT risk measures
GitHub: Developers aren't disappearing. They're leveling up
The future of successful HR will use AI with human oversight
UST: Businesses must rethink how AI returns are measured
Recent Risk & Compliance News
Snowflake launches AI control tools for business definitions
The new features let enterprises audit AI agents' access, spending and definitions, as businesses struggle with inconsistent context across systems.
Australia & New Zealand firms struggle to prove AI ROI
Most companies in Australia and New Zealand still cannot show AI has paid for itself, with 68% saying it has not justified the spend.
Google launches Gemini training bundles for finance, law
Free courses on Google Skills aim to help finance and legal staff use Gemini for tasks from bond issuance to contract review.
Hippo & Greenlight Re form partnership for MGA programmes
New MGA entrants may now find capital, policy issuance and reinsurance support bundled together through the tie-up, broadening market access.
Hyland launches Teams integration for governed content
It aims to cut the risk of files spreading across chats and channels by keeping regulated documents under existing governance controls in Teams.
Sectigo study: firms brace for post-quantum PKI shift
Most IT and security teams now expect public key infrastructure to need major changes as quantum-ready cryptography moves from planning to rollout.
Convera warns businesses to brace for FX swings in 2027
Businesses should prepare for wider currency swings in 2027 as competition for capital makes foreign exchange markets harder to predict.
Anglicare Victoria wins TrendAI cybersecurity award
It highlights rising pressure on care providers to protect sensitive client data as cyber incidents grow across Australia's social assistance sector.
Zoom pushes AI tools to drive work from talk to tasks
The push could help firms cut time spent on follow-up work as Zoom expands from meetings into AI tools for tasks, search and customer support.
APAC firms race ahead on AI agents, but controls lag
Most APAC firms running AI agents still lack oversight, leaving systems that can access data and act autonomously exposed to security and compliance risks.
CISOs lag on AI governance as board oversight trails
Many large firms still lack clear AI oversight, with just 7% of CISOs at companies above USD $10 billion in revenue owning the governance brief.
JFrog names nine winners of software supply chain awards
The inaugural prizes highlight a wider shift as large enterprises tighten oversight of code, AI models and other assets moving through development pipelines.
Prendos launches commercial property management service
Demand from owners unhappy with existing providers has helped Prendos get a commercial property management service already overseeing more than $40 million of asset.
Fleet launches AI governance tools for employee devices
IT teams can now track AI tools, token spend and data-sharing on employee devices as Fleet adds oversight features to its platform.
Gallagher wins cybersecurity award for warranty report
The feature helps site operators spot ageing hardware faster, reducing manual checks and sharpening cyber risk planning across larger installations.
Cisco warns Asia Pacific firms lack confidence on AI agents
Only 52% of firms across Asia Pacific, Japan and China feel ready to detect and respond to compromised AI agents, Cisco found.
SAP & NTT team up on sovereign cloud for governments
Governments and defence operators could gain tighter control over sensitive systems as the two groups target regulated customers with sovereign cloud services.
Dayforce deepens alliance with Deloitte on payroll tools
The tie-up will add shared go-to-market work and new payroll controls software as employers seek lower-risk HR system upgrades.
Keeper links Tenable findings to instant remediation
Security teams can now fix cloud risks faster, as Keeper's new Tenable link rotates credentials and enforces Just-In-Time access in seconds.
HITRUST adds AI security tools & third-party risk updates
Businesses facing surging AI and supplier reviews now have new HITRUST tools to cut questionnaire burden and tighten certification checks.
Job Moves
Securecom appoints Head of Cyber Security & promotes Kolver
Equinox IT appoints Victoria MacLennan as director
Watson named first head of New Zealand firearms regulator
Inde appoints Nish Sudhakaran as AI & data director
Queenstown cable car appoints local GM for project
Spectrum Consulting names Darryl van Rensburg for AI drive
Payments NZ appoints Michael Ahie as Chair of Board
Airwallex names Sir Bill English chair of New Zealand board
moomoo boosts New Zealand push with hires, premium tier