CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

Third-Party Risk Management Stories

UK Stories

Third-Party Risk Management stories

Know your business (KYB) for UK firms
Fintech

Know your business (KYB) for UK firms

Relying on Companies House alone can leave UK firms exposed to hidden ownership, weak screening and regulatory scrutiny.

By Barley Laing • 5 min read • Last month
UK fintech faces tougher oversight as rules tighten
Data Analytics

UK fintech faces tougher oversight as rules tighten

Regulators are widening scrutiny of digital finance, forcing UK fintechs to overhaul cloud, payments and data strategies to meet tougher standards.

By Sofiah Nichole Salivio • 7 min read • Thu, 30th Jul 2026
CNI firms report repeated supplier breaches, study finds
Identity and Access Management

CNI firms report repeated supplier breaches, study finds

Most critical infrastructure operators still face repeated supplier-led intrusions, with fresh research linking them to weaker oversight of remote access.

By Sofiah Nichole Salivio • 4 min read • Wed, 29th Jul 2026

Global Stories

Third-Party Risk Management stories

Qomplio opens early access for EU compliance platform
Software-as-a-Service

Qomplio opens early access for EU compliance platform

European businesses are facing rising costs and audit risk as overlapping AI, data and cyber rules force separate assessments for the same incident.

By Sean Mitchell • 4 min read • Last week
Veridion raises USD $20 million in Series A funding
Software-as-a-Service

Veridion raises USD $20 million in Series A funding

Banks and insurers could spot commercial risk sooner after Veridion secured USD $20 million to expand its live business graph.

By Karen Joy Bacudo • 4 min read • Last week
Why firms are now looking for AS9100 certification
Space

Why firms are now looking for AS9100 certification

Firms risk losing aerospace and defence contracts unless they can show tighter quality, traceability and data controls under AS9100.

By Jon Fielding • 4 min read • Last week
CyberDockside.ai & HexaShield launch port cyber service
Security Operations Centres

CyberDockside.ai & HexaShield launch port cyber service

Ports and ship operators face rising regulatory pressure as the new service offers round-the-clock monitoring for critical operational technology.

By Joseph Gabriel Lagonsin • 4 min read • This month
Pistachio buys Hugin IP to expand compliance tools
Software-as-a-Service

Pistachio buys Hugin IP to expand compliance tools

Smaller firms face mounting pressure to prove cyber compliance as Pistachio adds Hugin's technology to reach audit-ready customers across Europe.

By Joseph Gabriel Lagonsin • 4 min read • This month
Avetta appoints Lynda Richards as APAC health chief
Digital Transformation

Avetta appoints Lynda Richards as APAC health chief

Greater scrutiny of contractors and supply chains in APAC is driving Avetta to strengthen its safety and risk advisory team with a new hire.

By Joseph Gabriel Lagonsin • 4 min read • Last month
CREST launches AI testing standard for cyber firms
Application Security

CREST launches AI testing standard for cyber firms

Buyers of AI tools now have a benchmark to judge testing providers, as CREST's new standard targets gaps in assurance and due diligence.

By Mark Tarre • 4 min read • Last month
Eventus Security wins Masters of Risk Services award
Data Protection

Eventus Security wins Masters of Risk Services award

The win underscores rising demand for managed cyber services as businesses fold security into continuity, compliance and wider risk planning.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Drata launches AI agent governance for Anthropic users
Data Protection

Drata launches AI agent governance for Anthropic users

Enterprises running Anthropic-based agents can now track and control their actions, as Drata opens limited access to a new governance tool.

By Mark Tarre • 4 min read • Last month
Managing your supplier risk isn't a deadline. It's about your resilience
Digital Transformation

Managing your supplier risk isn't a deadline. It's about your resilience

Firms that treat DORA as a box-ticking exercise risk leaving critical supplier gaps that could hit operations, data and continuity.

By Sandhya Mohan-Pillai • 5 min read • Wed, 29th Jul 2026

Stories from Other Regions

Third-Party Risk Management stories

Numeracle launches corporate KYCaaS identity checks
Network Security

Numeracle launches corporate KYCaaS identity checks

Growing fraud fears are driving demand for continuous business identity checks, as Numeracle targets telecoms and other platforms with its KYCaaS service.

By Sofiah Nichole Salivio • 5 min read • This month
As Japan widens bank cyber oversight to data partners, identity becomes the perimeter
Data Protection

As Japan widens bank cyber oversight to data partners, identity becomes the perimeter

Japan's banks face broader cyber risk as regulators begin treating data-sharing partners and AI agents as part of the attack surface.

By Takanori Nishiyama • 2 min read • This month
How CPS 230 will indirectly impact manufacturers through their customers and suppliers
Disaster Recovery

How CPS 230 will indirectly impact manufacturers through their customers and suppliers

Manufacturers supplying banks and other regulated firms face tougher contract demands on resilience, cyber risk and continuity as CPS 230 beds in.

By Adam Bowles • 4 min read • Last month
MVB Bank taps Bretton AI for compliance operations
Fintech

MVB Bank taps Bretton AI for compliance operations

The agreement will let MVB Bank scale anti-money laundering and know-your-customer checks without adding staff as fintech compliance workloads rise.

By Karen Joy Bacudo • 4 min read • Last month