Surfing as a Team Sport: Riding the Regulatory Wave as a Top Competitor
summary
Regulation gushes in with concrete deadlines—6‑hour incident reporting in India, 72‑hour and 4 business day windows elsewhere, and 24‑hour NIS2 triggers—so teams map controls, build retention automation, and demand SBOMs from suppliers. Companies reuse a controls-to-certifications spreadsheet (Cisco’s Cloud Compliance Framework is available) and convert legal obligations into flowcharts, DPIAs and checklists. Internal audit and customer questions prove effective at surfacing gaps, and documented, systematic decisions beat ad hoc hero fixes.
AI-written summary · about
chapters (7)
- 0:00Welcome and introduction
- 1:082022 regulatory tidal wave
- 4:02Awareness of regulatory changes
- 17:42Implementing regulations in teams
- 32:56Monitoring and risk management
- 45:37Compliance as competitive advantage
- 46:00Q&A session
related talks
36mThe Clock is Ticking: CRA Compliance at Scale
27m4 Panel Session - Bridging Policy and Practice
33mAutomating Industry Regulation (SoX, SoC 2) Enforcement...
44mCompliance by Design | Continuous Compliance
33mNavigating Compliance: What Developers Can Learn From Driving
33mCompliance as Code - Lessons Learned From Regulated Organizations
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
41mCompliance & Regulatory Standards are NOT Incompatible with Modern Development