AWS Security Hub CSPM now includes automated security checks aligned with the Cyber Risk Institute profile version 2.2. This framework helps financial institutions harmonize cybersecurity and regulatory expectations into a common set of requirements. The update provides 404 controls that support a subset of the CRI Profile v2.2 requirements, excluding those needing manual checks. The…
Oct. 13, 2026, 9:31 PM UTC Amanda Iacone Senior Reporter Firms are seeking more information about the audit board’s approach to inspections under upcoming revisions to quality control standards.
The AICPA released a practice guide to help auditors apply current standards to the use of artificial intelligence in financial reporting and audits. The guide explains how an entity's reliance on AI affects acceptance decisions, risk assessment, and the understanding of internal controls. It highlights specific risks such as model drift, data governance issues, and…
The American Institute of CPAs and CPA.com announced new enhancements to the Dynamic Assurance Solution suite on October 14, 2026. The updates include expanded industry content, group audit capabilities aligned with SAS No. 149, and support for interim review engagements. A new module called DAS 11-K was also launched to support dual-compliance work for Form…
NIST published two reports addressing security in Open Radio Access Networks. The final report, IR 8625, analyzes the security of the AI-driven RAN Intelligent Controller and outlines future zero-trust architecture directions. A second document, draft IR 8623, maps O-RAN ALLIANCE security specifications to Cybersecurity Framework 2.0 outcomes for federal agencies. Public comments on the draft…
October 17, 2026 By Charlie Mitchell / August 11, 2026 The Wiley law firm has posted an analysis of National Institute of Standards and Technology draft guidance on artificial intelligence data center cybersecurity, explaining the elements of the voluntary NIST document prepared in line with a…
That is the context behind the National Institute of Standards and Technology’s Special Publication 800-171 Revision 3 and the current pause in CMMC Phase II implementation.
The AICPA issued a practice aid on October 13, 2026, to help auditors navigate the impact of artificial intelligence on financial statement audits. The guidance addresses how organizations use AI in financial reporting and how audit firms utilize AI tools during engagements. It provides a framework for evaluating AI-related risks, understanding control impacts, and determining…
The Public Company Accounting Oversight Board has published new agendas for its standard-setting and research activities following a public comment period. The plans cover topics such as auditor independence, fraud, and the use of new technologies in auditing. Big Four firms submitted comment letters urging the board to adopt a flexible approach to artificial intelligence…
NIST revises federal IoT requirements to cover full product ecosystem NIST announced on October 8 that it is revising SP 800-213A, the IoT Device Cybersecurity Requirement Catalog, with a public comment deadline of October 15, 2026. The revision aligns the catalog with SP 800-213 Rev.