The Trusted Blog

Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed
Sep 16, 2026 · 5 min read

Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed

Drata launches Third-Party Risk Management for defensible, evidence-backed vendor decisions across your whole portfolio.

Akanksha Nguyen
Akanksha NguyenSenior Director, Product Management
SOC 2, Unfiltered: What the Data Tells Us
Aug 25, 2026 · 8 min read

SOC 2, Unfiltered: What the Data Tells Us

New Drata report on SOC 2 adoption, readiness timelines, integrations, and what teams build next.

Daniel Marashlian
Daniel MarashlianCTO
The Accountability Problem: When AI Negatively Impacts the Audit, Who’s Responsible?
Aug 14, 2026 · 6 min read

The Accountability Problem: When AI Negatively Impacts the Audit, Who’s Responsible?

71% responded that AI tools led to a failed audit or lapsed standard. When AI produces this outcome, accountability ultimately rolls up to the CIO or CISO.

Matt Hillary
Matt HillaryCISO
The Insider Agent Threat: The Risk Isn't Just Someone Else's Agents… It’s Your Own
Aug 4, 2026 · 7 min read

The Insider Agent Threat: The Risk Isn't Just Someone Else's Agents… It’s Your Own

Everyone read the recent frontier-lab incidents as one company's AI intruding into another's systems. The more urgent story is what happens when the agent is your own.

Adam Markowitz
Adam MarkowitzCEO & Founder
What “AI” Actually Means in Policy, and Why Most Companies Should Start Smaller
Jul 23, 2026 · 7 min read

What “AI” Actually Means in Policy, and Why Most Companies Should Start Smaller

Most companies don't need a sprawling standalone AI policy. Start smaller—tighten your existing policies and use Drata's AI Usage Policy Template.

Shane Tierney
Shane TierneySenior Program Manager, GRC
From Control Monitoring to Measurable Risk Reduction
Sep 17, 20269 min read

From Control Monitoring to Measurable Risk Reduction

Monica Olmsted
Monica OlmstedGroup Lead, Partner Marketing
Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed
Sep 16, 20265 min read

Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed

Akanksha Nguyen
Akanksha NguyenSenior Director, Product Management
The Third-Party Problem: The Next Automation Frontier
Sep 14, 20267 min read

The Third-Party Problem: The Next Automation Frontier

Matt Hillary
Matt HillaryCISO
Post-SOC 2 Playbook for Regulated Enterprise: Building Your ISO 27001, PCI DSS, and AI Governance Roadmap
Sep 10, 20268 min read

Post-SOC 2 Playbook for Regulated Enterprise: Building Your ISO 27001, PCI DSS, and AI Governance Roadmap

Gretel Witt
Gretel WittSenior GRC Analyst
The Governance-Debt Problem: When AI Adoption Outruns the Guardrails
Sep 2, 20266 min read

The Governance-Debt Problem: When AI Adoption Outruns the Guardrails

Matt Hillary
Matt HillaryCISO
The Trust Problem: What “Enterprise-Ready” Means for GRC AI
Aug 26, 20265 min read

The Trust Problem: What “Enterprise-Ready” Means for GRC AI

Matt Hillary
Matt HillaryCISO
SOC 2, Unfiltered: What the Data Tells Us
Aug 25, 20268 min read

SOC 2, Unfiltered: What the Data Tells Us

Daniel Marashlian
Daniel MarashlianCTO
Post-SOC 2 Playbook for Defense: Building Your CMMC and NIST 800-171 Roadmap
Aug 19, 20267 min read

Post-SOC 2 Playbook for Defense: Building Your CMMC and NIST 800-171 Roadmap

Lauren Wilson
Lauren WilsonSenior Audit Alliances Manager
The Accountability Problem: When AI Negatively Impacts the Audit, Who’s Responsible?
Aug 14, 20266 min read

The Accountability Problem: When AI Negatively Impacts the Audit, Who’s Responsible?

Matt Hillary
Matt HillaryCISO

Subscribe to the Trusted Newsletter

Get expert insights, product updates, and best practices delivered to your inbox every week—so you never miss what's next in trust management.