Rivial Security Blog

Somewhere in almost every risk assessment proposal, the same quiet negotiation happens. The list starts at 60 systems, someone winces at the price, and it gets trimmed to 40. Another institution insists 20 is plenty. A third is sure the an...

If you work at a credit union, the last few months have made one thing hard to ignore: your next incident probably will not start on your network. It will start at a vendor. When a major industry vendor gets breached, the credit union...

A risk leader at a financial institution told us on a call this year, plainly, that Copilot already gets his team about 80 percent of the way through a vendor security review. He was not wrong, and he was not looki...

Financial institutions are adopting AI faster than they are governing it, and the request we now hear on calls is specific: "we need a credible AI governance framework, and we think it is the NIST AI RMF. Where do ...