The Trusted Blog

The State of Third-Party Risk Management: Why Teams Aren't Closing the Gap
Sep 22, 2026 · 6 min read

The State of Third-Party Risk Management: Why Teams Aren't Closing the Gap

New Drata research: 309 security leaders on why bigger TPRM teams still can't close the third-party risk gap.

David Aguiniga
David AguinigaPrincipal, Market Intelligence and PMM
Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed
Sep 16, 2026 · 5 min read

Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed

Drata launches Third-Party Risk Management for defensible, evidence-backed vendor decisions across your whole portfolio.

Akanksha Nguyen
Akanksha NguyenSenior Director, Product Management
SOC 2, Unfiltered: What the Data Tells Us
Aug 25, 2026 · 8 min read

SOC 2, Unfiltered: What the Data Tells Us

New Drata report on SOC 2 adoption, readiness timelines, integrations, and what teams build next.

Daniel Marashlian
Daniel MarashlianCTO
The Accountability Problem: When AI Negatively Impacts the Audit, Who’s Responsible?
Aug 14, 2026 · 6 min read

The Accountability Problem: When AI Negatively Impacts the Audit, Who’s Responsible?

71% responded that AI tools led to a failed audit or lapsed standard. When AI produces this outcome, accountability ultimately rolls up to the CIO or CISO.

Matt Hillary
Matt HillaryCISO
The Insider Agent Threat: The Risk Isn't Just Someone Else's Agents… It’s Your Own
Aug 4, 2026 · 7 min read

The Insider Agent Threat: The Risk Isn't Just Someone Else's Agents… It’s Your Own

Everyone read the recent frontier-lab incidents as one company's AI intruding into another's systems. The more urgent story is what happens when the agent is your own.

Adam Markowitz
Adam MarkowitzCEO & Founder
Why Compliance Is a Portfolio Revenue Lever for Private Equity Firms
Oct 1, 20267 min read

Why Compliance Is a Portfolio Revenue Lever for Private Equity Firms

Kayla Cytron-Thaler
Kayla Cytron-ThalerSenior Partner Development Manager
Get Ahead of the EU Cyber Resilience Act
Sep 29, 20265 min read

Get Ahead of the EU Cyber Resilience Act

Laila Porte Petit Hernandez
Laila Porte Petit HernandezSenior Product Manager
The State of Third-Party Risk Management: Why Teams Aren't Closing the Gap
Sep 22, 20266 min read

The State of Third-Party Risk Management: Why Teams Aren't Closing the Gap

David Aguiniga
David AguinigaPrincipal, Market Intelligence and PMM
From Control Monitoring to Measurable Risk Reduction
Sep 17, 20269 min read

From Control Monitoring to Measurable Risk Reduction

Monica Olmsted
Monica OlmstedGroup Lead, Partner Marketing
Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed
Sep 16, 20265 min read

Introducing Drata Third-Party Risk Management: Defensible Vendor Decisions at Agentic Speed

Akanksha Nguyen
Akanksha NguyenSenior Director, Product Management
The Third-Party Problem: The Next Automation Frontier
Sep 14, 20267 min read

The Third-Party Problem: The Next Automation Frontier

Matt Hillary
Matt HillaryCISO
Post-SOC 2 Playbook for Regulated Enterprise: Building Your ISO 27001, PCI DSS, and AI Governance Roadmap
Sep 10, 20268 min read

Post-SOC 2 Playbook for Regulated Enterprise: Building Your ISO 27001, PCI DSS, and AI Governance Roadmap

Gretel Witt
Gretel WittSenior GRC Analyst
The Governance-Debt Problem: When AI Adoption Outruns the Guardrails
Sep 2, 20266 min read

The Governance-Debt Problem: When AI Adoption Outruns the Guardrails

Matt Hillary
Matt HillaryCISO
The Trust Problem: What “Enterprise-Ready” Means for GRC AI
Aug 26, 20265 min read

The Trust Problem: What “Enterprise-Ready” Means for GRC AI

Matt Hillary
Matt HillaryCISO

Subscribe to the Trusted Newsletter

Get expert insights, product updates, and best practices delivered to your inbox every week—so you never miss what's next in trust management.