Closing the Confidence Gap: The Missing Link Between Risk Ownership and Resilience October 22, 2026 | By Travis Howerton Enterprise risk owners are highly motivated professionals that only want what’s best for their organization. But whether they are empowered to deliver is another matter. Risk is complex, fast moving, and spread out across the enterprise….
Lord of the Controls, Part 1: Leaving the Shire of Static PDFs October 20, 2026 | By Travis Howerton “Three Rings for the Cloud Kings under the federal sky, Seven for the Auditors in their halls of stone, Nine for Mortal CISOs doomed to manually reply, One for the Dark Lord on his SharePoint throne… One Trust Center to…
Beyond Cyber Awareness: Turning Vigilance into Continuous Resilience October 7, 2026 | By Travis Howerton Cybersecurity Awareness Month has been helping to educate businesses about emerging threats for over two decades. But true cyber resilience isn’t just about awareness of what the bad guys are doing. It also demands an understanding of whether the controls…
Why the Cyber Resilience Act Should Focus Minds on Continuous Controls Monitoring September 21, 2026 | By Travis Howerton Regulators are often criticized for being a step behind technological change. But the EU’s new Cyber Resilience Act (CRA) could not have come into force at a more critical time. Its vulnerability and incident reporting obligations…
Beyond Shift Left: Why Compliance Needs to Shift Down July 8, 2026 | By Travis Howerton Enterprise compliance teams have been on the back foot for too long. Manual GRC brings nothing but cost, complexity and fatigue. It eats up the time of engineering talent and creates new business and compliance risks. Organizations ultimately need…
RegScale Tripled Revenue as the CCM Category Arrives May 13, 2026 | By Travis Howerton We tripled revenue this year because something fundamental changed. Regulated organizations stopped deliberating about compliance automation and started demanding it. Our second annual State of CCM Report put data behind what our customers were already telling us, and our results,…
Enabling the Department of War’s New Vision for Cyber Defense September 26, 2025 | By Travis Howerton The Department of War (DoW) has signaled a fundamental transformation with its new Cybersecurity Risk Management Construct (CSRMC), moving from a legacy, document-centric approach to one of dynamic, continuous cyber defense. This shift is grounded in ten core…
The Path to RegScale Series B: Disrupting the Legacy GRC Market September 17, 2025 | By Travis Howerton It all started on the back of a napkin in San Francisco. RegScale’s co-founder (Anil Karmel) and I had just finished a long day leading a big digital transformation project in the national security space, where we…
NERC CIP Compliance: Herding Cats in a Thunderstorm September 15, 2025 | By Travis Howerton If you’ve ever worked in NERC CIP compliance, you know it’s like playing a game of Dungeons & Dragons where every dice roll determines whether your job stays online… or whether your auditors roll a natural 20 and crit your…
Get Your ATO Fast Pass: The RegScale Way to Galactic Compliance August 27, 2025 | By Travis Howerton You’ve been there. A government program manager with a brilliant new system, ready to deploy, only to face the final boss: the Authority to Operate (ATO). It’s a journey filled with manual spreadsheets, endless documentation, and auditors…