Filter By

Image - Drataverse '24 Agenda Preview

GRC Growth: Sneak Peek Into the Drataverse ‘24 Agenda

Join us at RSA

FOMO Alert: Why You Won’t Want to Miss Drata at RSA

Harmonize Announcement

Welcoming Harmonize To the Drata Family

Image - Public vs Private AI models

Public vs. Private AI Models: A Balanced Perspective

AWS Security Competency

Drata Becomes the First Compliance Automation Platform to Achieve AWS Security Competency Status

G2 Spring 2024 Thumb

Drata Leads the Charge in G2 Spring 2024 Reports

Drataverse Digital Recap Thumb

ICYMI: Adaptive Automation, AI, and More at Drataverse Digital

Privacy by Design is Crucial to AI

Privacy by Design Is Crucial to the Future of AI

AI in Social Engineering and Scams

AI in Scams and Social Engineering

Tier 2 Roundup Thumb

New Launches from Drataverse Digital: Adaptive Automation


TPRM: Save Even More Time With AI Capabilities

Existing Regulations that Impact the Use of A

AI Regulations: Where We’re At and Where We’re Going

Adaptive Automation

Adaptive Automation: Compliance Fully Configured For Your Company

Trust & Privacy by Design Drata-s AI Philosophy (1)

Trust and Privacy by Design: Drata's AI Philosophy

Discover Automation Fully Customized to You (1)

March 19, 2024

Drata Releases Adaptive Automation, Bringing Deeper Integrations, Custom Control Tests, and Configurability to GRC

NIST CSF 1.1 to NIST CSF 2.0

Everything You Need to Know About the Shift From NIST CSF 1.1 to NIST CSF 2.0

How AI impacts privacy

The AI Dilemma: Harnessing the Power of AI While Protecting Privacy

Discover Automation Fully Customized to You

First Look Into the New Era of Compliance Automation at Drataverse Digital

Customer Terms

Quick Recap of Our Updated Customer Terms

Momentum Blog Thumb

Reflecting on FY24: Resilient Growth and Leadership in Compliance Automation

Biden's executive order on AI

What the Biden Administration’s New Executive Order on AI Will Mean for Cybersecurity

Launch Alliance Program Allbound Banner

Introducing our New Partner Program: Launch—The Drata Alliance Program

Launch Alliance Program Allbound Banner

February 13, 2024

Drata Unveils Global Alliance Ecosystem, "Launch"

New Year New Capabilities

New Year, Already New Capabilities

G2's 2024 Best Software Awards

Drata Recognized in G2’s 2024 Best Software Awards

AI Best Practices

Essential AI Security Practices Your Organization Should Know

How to Avoid BEC Attacks - 936x532 (1)

Business Email Compromise Attacks Are on the Rise, Here’s How To Avoid Getting Duped

Ransomware Attacks on the Rise - 936x532 (1)

Ransomware Attacks Target These 5 Sectors Most

GRC Maturity: Manual Risk Management Programs Fall Behind

GRC Maturity: Manual Risk Management Programs Fall Behind

PCI DSS 4.0 Blog Thumbnail 936 x 531

PCI DSS v4.0: Everything You Need To Prepare for the March 2024 Deadline

Image - Expanding From SOC 2 to ISO 27001

Business Sense: Expanding From SOC 2 to ISO 27001

Built In Best Places to Work

January 09, 2024

Built In: Best Places to Work in San Diego

Drata EOY Review

Looking Back on 2023: Building Trust, Scaling Innovation, and Embracing the Future

Security Magazine article image

December 28, 2023

The Power of Automation for Better Vendor Risk Management

Asset - Podcast Episode 13

Compliance Uncomplicated Episode 13: Cloud Compliance and Startups

DDRR Recap

A Recap of Drataverse Digital: Risk and Reward

G2 Thumb

Drata Secures Top Spot in G2 Winter 2024 Rankings

How cybercrime losses have doubled

How Cybercrime Losses Have More Than Doubled in 2 Years

DDRR RiskTrendst (1)

Navigating the New Normal: 5 Takeaways From Our Risk Trends Report

Fortune Cyber 60

December 13, 2023

Fortune Cyber 60

SentinelOne + HRIS

Reduce Manual Workload With SentinelOne and 23 New Deep HRIS Integrations

TPRM (1)

Unveiling Third-Party Risk Management (TPRM): A Future-Proof Approach to Risk


Drata's New NIST AI RMF: A Game-Changer for AI Risk Management

Events DDRR on demand

December 12, 2023

Drata Launches Third-Party Risk Management

EU AI Act - list

Europe Narrows in on First Artificial Intelligence Act

AWS re:Invent Recap

ICYMI: Drata x AWS re:Invent 2023

Drataverse Digital Risk and Reward

Control Meets Confidence at Drataverse Digital: Risk and Reward

VentureBeat article image

December 03, 2023

Breaches Happen: It’s Time to Stop Playing the Blame Game and Start Learning Together


Business Continuity and Resilience 101


What Is a Data Retention Policy? Best Practices + Template

Deploy Drata in Minutes With Quick Launch

Drata Enables Quick Launch Feature for Faster Procurement in AWS Marketplace

ICYMI Drataverse Digital Header

Drata's Evidence Library: Revolutionizing Evidence Collection and Management

CCM 101 - Thumbnail

CCM 101: Introducing the Cloud Control Matrix

User Access Reviews | Drata

Drata's User Access Review: Empowering GRC Teams with Streamlined Efficiency

Can’t-Miss Booths at AWS re Invent

7 Booths to Visit at AWS re:Invent for Secure Clouds, Code, and Compliance

ICYMI Drataverse Digital Header

Streamlining Security and Compliance with Drata's New Role-Based Access Control

ICYMI Drataverse Digital Header

Drata Launches Control Readiness Approval

AWS re invent - Everything You Need to Know

Going to AWS re:Invent 2023? Here’s Everything You Need to Know

Illustraction depicting a GDPR compliance checklist

GDPR Compliance Checklist: How to Become Compliant


The No-nonsense CCPA Compliance Checklist

Drata at AWS re:Invent

Empowering Security and Compliance Automation in the Cloud at AWS re:Invent 2023

ICYMI Drataverse Digital Thumb

ICYMI at Drataverse: Enhanced Access and Control

What's New in Drata Thumb

Drataverse Digital: Access & Control [+] What’s New in Drata

ICYMI Drataverse Digital Header

October 24, 2023

Drata Introduces Role-Based Access Control and User Access Reviews to Further Automate GRC Processes, at Drataverse Digital

Illustration of a scale showing different levels of risk and a clipboard.

Risk Register: How to Build One + Examples


Beginner’s Guide to Third-Party Risk Management

What to Expect Thumbnail

What to Expect at Drataverse Digital: Access and Control

SOC 2 Compliance Checklist hero image

SOC 2 Compliance Checklist: 9 Key Steps To Take


What Is a PCI ROC + When Do You Need One?

PCI Audits hero

PCI DSS Audit: What It Is + How to Prepare

G2 Fall Reports Thumb

Drata Shines in G2 Fall Reports

Cyberattacks on Local Govs Hero

Cyberattacks on Local Governments on the Rise, Highlighting a Need for Enhanced Security

Cyber Essentials Thumb

September 06, 2023

Drata Launches Support for Cyber Essentials

CE Checklist Thumb

Cyber Essentials Checklist

Cyber Essentials Thumb

Cyber Essentials Now Available in Drata

Asset - Schneider Downs

Why Drata Is the Preferred Compliance Automation Platform for Schneider Downs

Drata group shot

August 31, 2023

100 Best Medium Workplaces of 2023

CCM and ISO Blog Thumb Image

CCM, ISO 27017, and ISO 27018 Now Available in Drata

PCI Compliance Checklist Hero

PCI DSS Compliance Checklist: Understanding the 12 Requirements

Asset - Podcast Episode 12 Drataverse Live

Compliance Uncomplicated Episode 12: Transparency and Continuous Compliance Live From Drataverse

Cofounders group shot

August 24, 2023

The 19 Most Promising Cybersecurity Startups of 2023, According to VCs

Evidence Library Blog Header

Streamline Evidence Collection with Our New Evidence Library

Informationweek article image

August 18, 2023

5 Questions Organizations Should Ask Themselves Before Collecting Data

Penetration testing hero

Penetration Testing: Why It’s Important + Common Types

Recovery point objective hero image

Recovery Point Objective (RPO): What It Is + Why It Matters

Drata KnowBe4 Partnership

KnowBe4 Chooses Drata as Their Exclusive GRC Partner

Drata KnowBe4 Partnership

August 01, 2023

Drata Selected as KnowBe4's Exclusive GRC Partner and Preferred Compliance Automation Platform for KnowBe4 customers

New CCPA Enforcement Delays - Thumbnail

New CCPA Regulation Enforcement Delayed Until March 2024

Asset - Image - Uncomplicated Podcast Pinwheel Episode 11

Compliance Uncomplicated Episode 11: Securing the Future of Financial Innovation With Pinwheel’s CISO

HIPAA vs HITRUST hero image

HIPAA vs. HITRUST: Key Differences Explained

HIPAA Compliance Checklist Hero

HIPAA Compliance Checklist: Essential Steps for Compliance [2023]

Healthcare Breach States - Thumnbnail

States Most Impacted by Healthcare Data Breaches in 2022

Compliace Statistcs Hero

85 Compliance Statistics You Need To Know in 2023

Asset - Uncomplicated Podcast - Labelbox

Compliance Uncomplicated Episode 10: The Power of Secure AI Solutions With Labelbox

Drata New CMO

Introducing Drata's Chief Marketing Officer, Sydney Sloan

User access review hero image

How to Perform User Access Reviews

Drata New CMO

July 11, 2023

Sydney Sloan Joins Drata as Chief Marketing Officer

What You Need to Know About the New Cybersecurity Strategy - Thumbnail

What You Need to Know About the New National Cybersecurity Strategy

Demand for Cybersecurity Talent

Demand for Cybersecurity Analysts Is Growing Twice as Fast as the Workforce

Audit Your Auditor - Thumbnail

Audit Your Auditor: 5 Questions to Ask a Potential Auditor

Supply Chain Security - Thumbnail

Supply Chain Security + How to Solve 5 Most Common Risks

Trust Center Essential

Introducing Trust Center Essential: Your New Built-In Trust Center

Next Generation Automation Drata

Preview: Next Generation Automation Platform From Drata

Drataverse Recap

ICYMI: Drata’s Inaugural User Summit

ISO 27001 checklist hero

ISO 27001 Checklist: 8 Easy Steps to Get Started

Drataverse Sneak Peeks

Drata Shares Glimpse of Next Generation Automation and New Enhancements at Drataverse

SOC 2 Type 1 vs Type 2 hero

SOC 2 Type 1 vs. Type 2: How They Differ

Asset - Uncomplicated Podcast Polycon

Compliance Uncomplicated Episode 9: Empowering a Security-First Culture With Polygon

G2 Summer Blog Thumb

Drata Recognized as Momentum Leader for G2 Summer 2023 Report

Ask an Auditor Header ISO 27001

Ask an Auditor: Demystifying the ISO 27001 Certification Process With Steve Cullen From ARORA Solutions

SOC 2 Report Example hero

What Is a SOC 2 Report? [+ Example]

How to Evaluate Control Deficiencies - Thumbnail

How to Evaluate Internal Control Deficiencies in Your Audit

AI and New Technologies List

How Machine Learning and New AI Technologies Could Change the Cybersecurity Landscape

Media - Drataverse - Special Keynote

Drataverse Welcomes Coleen Coolidge and Jerry Rice as Guest Speakers

SOC 2 Audit Hero Image

SOC 2 Audits: What You Can Expect From Start to Finish

Asset - Compliance Uncomplicated Gather Voices - Thumbnail

Compliance Uncomplicated Episode 8: Storytelling and Founder Advice With Gather Voices

SOC 2 vs SOC 3 hero image

SOC 2 vs. SOC 3: How Are They Different?

Cybersecurity Memes

15 Cybersecurity Memes That Will Make You Laugh Then Cry

New CISO and CCO

Drata Welcomes New Chief Information Security Officer and Chief Customer Officer

New CISO and CCO

May 23, 2023

Drata Broadens Leadership Team with New Chief Information Security Officer and Chief Customer Officer

ISO 27001 controls hero

Understanding ISO 27001 Controls: A Guide to Annex A

How to Apply Automation in DevOps Practices - Thumbnail

DevOps Automation: How to Apply Automation in DevOps Practices

4 Myths You Should Know About Access Reviews

3 Myths You Should Know About Access Reviews

SOC 2 Type 2 Hero

SOC 2 Type 2: A Beginner’s Guide

Asset - Compliance Uncomplicated Episode 7 Thumbnail

Compliance Uncomplicated Episode 7: Building a Secure Future With Vercel’s CISO

How To Review A Vendor's SOC Report Thumbnail

How to Review a Vendor’s SOC Report

Lily Hsiao

Drata Brings on Lily Hsiao, VPE, Application Development


What Is a SOC 2 Bridge Letter? [+ Template]

Media - Blog Drataverse

Full Drataverse Lineup Released

Feature Roundup (1)

What’s New in Drata: April Feature Roundup

Introduction to Orchestration

What is Orchestration?

Data Privacy Stats (1)

Ask an Auditor: Navigating Your First SOC 2 Audit With Jeffrey Filler From Boulay Group

Cost of Not Being Compliant with Frameworks

The Cost of Non-Compliance

Corporate Compliance Insights Alphabet Soup

April 05, 2023

Decoding the Alphabet Soup of Audits

Distology logo

April 04, 2023

Drata Expands Global Footprint with Distology Partnership

Asset - Compliance Uncomplicated - PixieBrix

Compliance Uncomplicated Episode 4: Perfecting the User Experience With PixieBrix

Common Employee Errors (1)

5 Human Errors in Cybersecurity That Put Your Organization at Risk

ISO 27005 2018 vs. ISO 27005 2022 (1)

Understanding the Differences Between ISO 27005:2018 and ISO 27005:2022

Asset - Podcast Episode 3 - Linear B

Compliance Uncomplicated Episode 3: The Common Language of Security With LinearB


February 20, 2023

Cybersecurity Risk Management – How And Where To Focus

Open API@2x

February 16, 2023

Drata Ushers A New Era of Trust with Open API

SOC 2 Compliance Guide

New Resource: Start-to-Finish Guide on SOC 2 Compliance

George Bonser Drata Update@3x

February 07, 2023

George Bonser Joins Drata as VP of Sales in EMEA

George Bonser Drata Update@3x

Going Global: Drata Welcomes George Bonser as the VP of Sales in EMEA

Audit Hub Blog

Introducing the Drata Audit Hub: Your Communication and Collaboration Command Center

Audit Hub Blog

February 02, 2023

Drata Launches Audit Hub for Enhanced Auditor Collaboration