Onspring

10/16/2026

Proposed HIPAA Security Rule changes are reshaping healthcare compliance. The new amendments shift from periodic exercises to continuous operational discipline, requiring stronger controls, mandatory recurring audits, and documented proof that safeguards work.

Key changes: encryption and MFA become required, vulnerability scanning every six months, and tighter business associate oversight.

Read Ryan Redman's full analysis on what healthcare leaders need to know ▶️ https://hubs.la/Q04zdmZL0

Proposed HIPAA Security Rule changes could require stronger cybersecurity controls, recurring audits and more evidence that safeguards are working.

10/15/2026

Managing GDPR, HIPAA, PCI DSS, SOC 2, NIST CSF separately? That's duplicate work, inefficient audits, and compliance fatigue. Control mapping links controls to multiple frameworks at once— one assessment satisfies multiple obligations.

Learn how to eliminate redundant testing and build a scalable compliance program.

Read the full blog ➡️ https://hubs.la/Q04rsG7k0

Stop running the same compliance tests for each framework. Control mapping cuts redundant work and speeds up audits.

10/14/2026

Last day to hit the jackpot of knowledge and connections! Don't miss the Innovation Showcase, final sessions, and tonight's one-of-a-kind experience at Sphere.

Make it count.

View the agenda: https://hubs.la/Q04zk89z0

10/13/2026

Serge Stines takes the stage in just a few hours at InfoSec World (Tech Theater 1, 1:05 PM ET) to talk about strategies for successfully Integrating AI into your GRC program.

If you're at the event, we'd love to see you there.

We'll be around all day. Stop by booth 616 to say hello!

10/13/2026

Security leaders present compelling data, yet struggle to secure executive buy-in. The gap isn't in the data. It's in the story. Executives think in business outcomes. Security teams think in risk. When those worlds don't connect, even the strongest business case falls flat.

Discover how to translate security into business value.

Read the full blog: https://hubs.la/Q04rvQb40

Cybersecurity communication fails when security teams speak technical while executives think business. Discover how to bridge that gap.

10/13/2026

We're live at Onspring Connect 2026! Welcome to Vegas.

Ready to learn, connect, and level up your GRC game? The agenda is packed. What's first on your list?

View the agenda: https://hubs.la/Q04zk73c0

10/08/2026

Security and compliance teams want the same thing-- a resilient, secure organization. So why do they so often work at cross-purposes?

The gap is structural. Compliance prioritizes documentation and audit readiness. Security prioritizes speed and threat response. Add siloed tools, conflicting timelines and different languages, and you get duplicated workflows, coverage gaps, slower breach response and audit surprises.

According to KPMG, only 26% of organizations have strong cross-functional collaboration between these teams.

The path forward? Shared workflows, centralized data, integrated GRC technology and a culture of collaboration.

We just published a detailed guide on exactly how GRC leaders can close this gap.

Read the full blog ➡️ https://hubs.la/Q04pRKP80

Close the gap between security and compliance teams. See how shared workflows, centralized data, and integrated platforms drive alignment.

10/06/2026

One week until Onspring Connect 2026 hits Las Vegas. Explore the agenda, and lock in your must-see sessions for high-stakes learning, real connections, and insights that move the needle.

➡️https://hubs.la/Q04zk5Q_0

10/06/2026

Data silos are expensive. When compliance, risk and security teams work in disconnected systems, they duplicate effort, lose visibility into how risks connect across the organization and waste time reconciling conflicting records.

Shared data breaks down departmental silos by centralizing GRC records, enabling real-time collaboration and automating manual work. Teams gain a holistic view of their risk posture and respond to regulatory changes faster.

Read the full guide on shared data as the foundation of modern GRC: https://hubs.la/Q04pSRSS0

Learn why shared data is the foundation of modern GRC, improving visibility, collaboration, and risk management across teams.

10/02/2026

Join us at Infosec World. Registration closes September 4th. Don’t miss Serge Stine’s presentation on October 13th, “Successfully Integrating AI into Your GRC Program.”

Lock in your spot, and save 20% with code ISW26-ONSPRING20.

Register here: https://hubs.la/Q04wKZT10 (https://hubs.la/Q04wKZT10)