Why the Cyber Resilience Act Should Focus Minds on Continuous Controls Monitoring September 21, 2026 | By Travis Howerton Regulators are often criticized for being a step behind technological change. But the EU’s new Cyber Resilience Act (CRA) could not have come into force at a more critical time. Its vulnerability and incident reporting obligations…
Beyond Shift Left: Why Compliance Needs to Shift Down July 8, 2026 | By Travis Howerton Enterprise compliance teams have been on the back foot for too long. Manual GRC brings nothing but cost, complexity and fatigue. It eats up the time of engineering talent and creates new business and compliance risks. Organizations ultimately need…
RegScale Tripled Revenue as the CCM Category Arrives May 13, 2026 | By Travis Howerton We tripled revenue this year because something fundamental changed. Regulated organizations stopped deliberating about compliance automation and started demanding it. Our second annual State of CCM Report put data behind what our customers were already telling us, and our results,…
Enabling the Department of War’s New Vision for Cyber Defense September 26, 2025 | By Travis Howerton The Department of War (DoW) has signaled a fundamental transformation with its new Cybersecurity Risk Management Construct (CSRMC), moving from a legacy, document-centric approach to one of dynamic, continuous cyber defense. This shift is grounded in ten core…
The Path to RegScale Series B: Disrupting the Legacy GRC Market September 17, 2025 | By Travis Howerton It all started on the back of a napkin in San Francisco. RegScale’s co-founder (Anil Karmel) and I had just finished a long day leading a big digital transformation project in the national security space, where we…
NERC CIP Compliance: Herding Cats in a Thunderstorm September 15, 2025 | By Travis Howerton If you’ve ever worked in NERC CIP compliance, you know it’s like playing a game of Dungeons & Dragons where every dice roll determines whether your job stays online… or whether your auditors roll a natural 20 and crit your…
Get Your ATO Fast Pass: The RegScale Way to Galactic Compliance August 27, 2025 | By Travis Howerton You’ve been there. A government program manager with a brilliant new system, ready to deploy, only to face the final boss: the Authority to Operate (ATO). It’s a journey filled with manual spreadsheets, endless documentation, and auditors…
Fueling the AI Revolution: Modernizing Nuclear Cybersecurity Compliance with RegScale August 15, 2025 | By Travis Howerton The relentless growth of AI demands an unprecedented surge in energy production. Is the nuclear sector prepared? Today, OpenAI’s ChatGPT will process over 2 billion prompts worldwide, consuming more electricity than a small city. Tomorrow, it will process…
End-to-End Compliance as Code for FedRAMP 20x KSIs June 28, 2025 | By Travis Howerton This month, RegScale achieved an end-to-end prototype for automating the FedRAMP 20x Key Security Indicators (KSIs) inside our Continuous Controls Monitoring (CCM) platform. We’re proud to be building this in partnership with the Cloud Security Alliance (CSA) as part of…
Legacy GRC: The Silent DoS Attack on Your Business (and Sanity) April 24, 2025 | By Travis Howerton Let’s be honest, folks. When we hear “Denial of Service (DoS) attack,” we picture shadowy figures in hoodies, furiously typing code to bring down a website. We think of flashing red lights, panicked IT teams, and maybe…