https://cybersecpro.me/categories/compliance-and-grc/Recent content in Compliance and GRC on Juan Carlos MuneraHugo -- gohugo.ioen© 2026 Juan Carlos MuneraTue, 28 Jul 2026 00:00:00 +0000https://cybersecpro.me/posts/pci-dss-v4-nist-csf-2-0-mapping/Tue, 28 Jul 2026 00:00:00 +0000https://cybersecpro.me/posts/pci-dss-v4-nist-csf-2-0-mapping/What the new mapping actually buys you, where teams misread it as control equivalence, and how much rework that mistake creates.https://cybersecpro.me/posts/pci-dss-rfc/Tue, 21 Jul 2026 00:00:00 +0000https://cybersecpro.me/posts/pci-dss-rfc/The Council named future technology and AI innovation in its request for comments. Here’s how the RFC process works and what happens next.https://cybersecpro.me/posts/fable5-shutdown/Thu, 18 Jun 2026 00:00:00 +0000https://cybersecpro.me/posts/fable5-shutdown/Anthropic disabled two frontier models worldwide to comply with an export directive. The practitioner takeaways on dual-use AI and availability risk.https://cybersecpro.me/posts/joint-agency-ai-guidance/Sun, 03 May 2026 00:00:00 +0000https://cybersecpro.me/posts/joint-agency-ai-guidance/What Careful Adoption of Agentic AI Services means for non-human identity, privilege design, and compliance programs that haven’t caught up.https://cybersecpro.me/posts/too-sassy-for-compliance-2/Mon, 23 Mar 2026 00:00:00 +0000https://cybersecpro.me/posts/too-sassy-for-compliance-2/Two weeks after writing about the structural problems with compliance platforms, the allegations landed. What assessors already knew.https://cybersecpro.me/posts/too-saasy-for-compliance/Sun, 08 Mar 2026 00:00:00 +0000https://cybersecpro.me/posts/too-saasy-for-compliance/A reality check on compliance automation platforms, the gap between generated evidence and assessed controls, and the questions to ask.