The Spreadsheet Isn’t the Problem. It’s the Symptom. April 15, 2026 | By Gabrielle Hovendon The #1 GRC tool is… still a spreadsheet. Nearly 800 GRC practitioners have been surveyed, and the headline finding is one that will make many CISOs uncomfortable: the most widely used GRC tool in 2026 is the spreadsheet. The data…
AI in GRC: Friend, Foe, or FOMO? February 19, 2026 | By Gabrielle Hovendon Everyone wants AI. No, scratch that; everyone needs AI. At least, that’s what leaders are concluding after seeing all the analyst reports, attending all the conferences, and reading all the industry news. The FOMO is real, and it’s creating a kind…
RegScale Partners with Leidos to Revolutionize cATO February 5, 2026 | By Gabrielle Hovendon Getting an Authority to Operate (ATO) shouldn’t feel like waiting for a glacier to move. But for most federal agencies, that’s exactly what it feels like. Static documentation, manual processes, and periodic reporting cycles create bottlenecks that delay critical mission capabilities and…
2026 Predictions: Reshaping Defense, Compliance, and Risk January 21, 2026 | By Gabrielle Hovendon It’s 2026, which means we’re officially past the point of asking if AI will transform cybersecurity. The only question now is whether your organization will be ready when it does. 2025 marked the year that AI moved from industry buzzword to active battlefield. Now, the gap between organizations that operationalize AI and those…
Celebrating Four Years of Innovation: RegScale’s Journey to Series B and Beyond December 3, 2025 | By Gabrielle Hovendon RegScale is turning four, and what a year it’s been! Since our third birthday celebration, we’ve transformed from a rising startup into a recognized leader in the GRC space — and there’s so much more to come. Join us as we reflect on our extraordinary year of…
Building the Future: Our Vision for AI-Powered GRC November 19, 2025 | By Gabrielle Hovendon GRC has always been a data-intensive discipline, but the scale and complexity of modern regulatory environments have been pushing traditional approaches to their breaking point. Organizations are drowning in frameworks, struggling to keep pace with regulatory changes, and spending countless hours on manual…
Why Compliance as Code is the Future (And How to Get Started) October 15, 2025 | By Gabrielle Hovendon If you’ve ever managed enterprise compliance, you know the drill all too well. It’s the night before the audit deadline and you’re drowning in spreadsheets, frantically gathering evidence. It’s 2025 — but you feel like you’re…
How We Paved the Way for Faster, Easier FedRAMP High Authorization June 24, 2025 | By Gabrielle Hovendon For most cloud service providers, FedRAMP certification feels like scaling Mount Everest: expensive, time-consuming, and reserved for only the well-resourced. The traditional path to FedRAMP approval has been notoriously complex, often taking multiple years and millions of dollars to…
How Automation Improves Cloud Security: Insights from ScaleSec and RegScale June 17, 2025 | By Gabrielle Hovendon As organizations move through their cloud transformation journeys, one truth has become increasingly clear. Automation isn’t just a nice-to-have; it’s essential for maintaining robust cloud security at scale. The following topics were originally discussed during our Cloud Security…
Science Stymied by Spreadsheets? Modernizing DOE Compliance May 2, 2025 | By Gabrielle Hovendon The National Laboratories of the Department of Energy stand at the forefront of scientific innovation, tackling complex challenges and advancing research across the world. But behind these groundbreaking discoveries lies a less glamorous reality: the overwhelming number of compliance processes that…
Our site uses, and allows third parties to use, cookies and other tracking technologies to enable and improve site functionality, analyze site use, generate user and site analytics, and facilitate advertising. As explained in our Privacy Policy, we may transfer data to third parties through use of these tracking technologies. Click "Accept All" to agree. Click "Decline All" to decline these activities.