EMERGING TECHNOLOGY, CYBERSECURITY
Businesswire | May 02, 2023
Veracode, a leading provider of intelligent software security solutions, today announced its attainment of State Risk and Authorization Management Program (StateRAMP).
StateRAMP offers state and local government agencies a standardized approach toward compliance to help them improve their overall security posture. Veracode obtained FedRAMP authorization in July 2022, and this week’s authorization by StateRAMP reaffirms the company’s commitment to deliver cloud-based application security software to agencies at all levels of government—federal, state, and local.
“High-profile attacks and vulnerabilities are significantly impacting the software supply chain across industries, and state and local government is no different,” said Claire Bailey, Regional Vice President of Governmental Affairs at Veracode. “Agencies need capabilities that allow them to protect the application layer. This authorization enables Veracode to support evolving state and local government security requirements. We look forward to assisting the StateRAMP mission of improving the cyber posture of public institutions and the citizens they serve.”
Veracode’s intelligent software security platform provides comprehensive application-layer protection to reduce risk in today’s dynamic threat environment. The platform supports a range of current and emerging cybersecurity requirements and best practices, including:
Securing the software supply chain through capabilities such as the generation of a Software Bills of Materials (SBOM), which provides visibility into the open-source code components that are contained in a software product Integrating security into software development from the beginning of the process (‘shifting left’) Providing a developer-friendly user experience to integrate security into the software development life cycle Supporting cloud-native development and managing risk across the application portfolio Uniting security and development teams to address cybersecurity challenges
The StateRAMP authorization enables Veracode to support state and local agencies’ cybersecurity initiatives at a time of increased risk. A shortage of skilled IT security professionals has depleted the security teams of many state agencies, and Chief Information Security Officers report risks arising from persistent malware, ransomware, and phishing attempts, according to a recent National Association of State Chief Information Officers (NASCIO) survey.
Veracode’s recent State of Software Security 2023 report revealed that, over the last 12 months, more than 74 percent of applications contained at least one security flaw. Due to variation in the types of flaws that compromise application security, security teams should use a variety of scan types to discover elusive flaws.
Bailey added, “Security teams should have confidence in the options available to secure their cyber infrastructure and make their digital landscape a safer place overall. StateRAMP makes this goal much more attainable for state and local agencies. Veracode’s platform provides a single view of an organization’s security posture and compliance via powerful reporting and analytics, restoring confidence in the digital infrastructure of agencies.”
State and local agencies can access Veracode’s comprehensive software security platform—including static analysis, software composition analysis (SCA), dynamic analysis, pipeline scanning, eLearning, container scanning, API scanning, and infrastructure as code (IaC) scanning—on the StateRAMP Marketplace.
About Veracode
Veracode is intelligent software security. The Veracode Software Security Platform continuously finds flaws and vulnerabilities at every stage of the modern software development lifecycle. Trusted by security teams, developers, and business leaders from thousands of the world’s leading organizations, Veracode is the pioneer, continuing to redefine what intelligent software security means.
Read More
EMERGING TECHNOLOGY, INFRASTRUCTURE
Newswire.ca | May 03, 2023
Dye & Durham Limited, a leading provider of cloud-based, efficient workflow software for legal and business professionals, today announced a renewed partnership with CentralSquare Technologies ("CentralSquare") by entering into a 10-year agreement that significantly expands Dye & Durham's seamless integration of online government services.
As a trusted public sector partner for decades, Dye & Durham provides mission-critical solutions to governments at the municipal, provincial and federal levels that deliver online services relied upon by millions of Canadians, including legal and financial services professionals.
Dye & Durham is also a market leader in driving innovative digital infrastructure capabilities that enable governments to seamlessly serve Canadians. That includes providing real-time online access to tax certificates, facilitating millions of tax and bill payments between governments and the nation's largest financial institutions and acting as an authorized service provider under contract with the Government of Ontario for over 25 years. Responsibilities in the province include providing front-end electronic registry solutions and operational capabilities for the Ontario Business Registry that enables access to corporate records, registrations and filing services.
Not only do these solutions help governments improve the citizen experience, they also drive significant costs savings for municipal and provincial governments by having Dye & Durham manage the entire process.
Under the new 10-year agreement, more municipalities in Ontario and Alberta will now have access to Dye & Durham's TCOL (Tax Certificates Online) solution that has been available in British Columbia since 2007, where at least 108 municipalities are using it. To date, Dye & Durham has processed more than two million tax certificates.
"We pride ourselves on operating Canada's digital infrastructure that enables millions of transactions that power the economy," said Matthew Proud, CEO of Dye & Durham. "That's why we're committed to constantly improving the delivery of crucial government services in a seamless manner to support economic growth and improve the government-to-citizen experience."
The renewed partnership will also see further integration of CentralSquare's innovative solutions within the broader Dye & Durham technology ecosystem, driving greater efficiencies between government, businesses and citizens.
"At our core, we believe in creating smart solutions that improve the lives of citizens," said Justin Murphy, VP of Product Management at CentralSquare. "Working with Dye & Durham – a like-minded company where innovation is at the heart of everything we do – has allowed us to bring additional value to our cloud-based Property Tax solution in the Ontario market, and we are thrilled to be continuing our partnership."
About Dye & Durham
Dye & Durham Limited is one of the world's largest providers of cloud-based legal practice management software. Dye & Durham also provides critical information services and workflows, which customers use to manage their non-discretionary information, regulatory and due diligence requirements. The company has operations in Canada, the United Kingdom, Ireland, and Australia.
About CentralSquare Technologies
CentralSquare Technologies is the largest independent provider of public sector software solutions that empower local and state governments to build smarter, safer and more connected communities. Over 8,000 agency customers across North America rely on CentralSquare's technology to deliver solutions ranging from computer-aided-dispatch systems, 911 and records management solutions which enhance public safety, to administrative products with finance, asset, compliance and case management capabilities that run government agencies more efficiently. As the market driver for advancing safety and justice with innovative technology, CentralSquare serves 3 out of 4 citizens across North America. The company is headquartered in Lake Mary, FL and has locations in North Carolina, South Dakota and British Columbia. More information is available at CentralSquare.com.
Read More
GOVERNMENT FINANCE
PR Newswire | May 18, 2023
OneTrust, the market-defining leader for trust intelligence, introduces OneTrust Artificial Intelligence (AI) Governance, a comprehensive solution designed to help organizations inventory, assess, and monitor the wide range of risks associated with AI. As organizations use AI and machine learning (ML) to process large amounts of data and drive innovation, AI Governance provides visibility and control over data used and risks generated by AI models.
According to Gartner, "Success and scaling of AI projects require leaders to address strategies and methods related to fairness, transparency, explainability, reliability, privacy, and security."1 As the use of AI and machine learning becomes more widespread, it is essential for organizations to address the privacy, ethical, and societal risks associated with these technologies. With AI Governance, organizations can embed data ethics, privacy, and security practices by default into the use of AI across their business.
"Responsible AI is not an option, but a necessity in today's business landscape," said Blake Brannon, Chief Product and Strategy Officer at OneTrust. "AI Governance provides a comprehensive solution for managing the unique risks associated with AI, including privacy, ethical, compliance, and operational risks. Using our product, organizations can automate record keeping and risk management, ensuring transparency, fairness, and accountability in their AI systems. By implementing responsible AI practices, companies can build trust with customers, regulators, and society at large, and position their business for success in the AI-driven future."
With AI Governance, compliance teams and data scientists can better understand data use and classification, evaluate the risks, and demonstrate compliance with emerging global requirements to ensure AI is used ethically and responsibly:
Inventory: Organizations can centrally view and manage AI projects, models, and data sets both internally developed and sourced from third parties. AI Governance establishes relationships across data sets and AI models to trace the path of data from its origin.
Assess risk: Users can assess AI projects against global laws and frameworks, including the NIST AI Risk Management Framework (RMF), OECD AI Principles, and more. AI Governance, along with OneTrust Data Discovery & Governance, connects to structured and unstructured sources of data to automatically discover and classify sensitive and personal data that may drive algorithmic bias or privacy risk. Regulatory intelligence helps automate compliance workflows and risk management, and automatically generate required control mitigations and compliance documentation such as conformity assessments.
Monitor: AI Governance integrates with existing model registries and MLOps tooling to detect AI model use and changes, and sync with a centralized inventory. Teams can continually evaluate models and training data for drift, bias, fairness, accuracy, and quality with in-app alerts.
Only OneTrust provides the powerful combination of privacy and risk management solutions, built-in regulatory guidance, data discovery and classification, and AI risk management framework templates to manage the unique and broad-reaching risks posed by AI systems. The solution leverages OneTrust's deep experience in data privacy and governance, and robust tools for managing risk and record keeping for audit, compliance, and proactive trust management.
OneTrust AI Governance will be available to select, qualifying customers through the AI Governance Early Access Program (EAP). This program offers an opportunity to get an early look at the solution and provide feedback to shape its development.
About OneTrust
OneTrust is the trust intelligence cloud platform organizations use to transform trust from an abstract concept into a measurable competitive advantage. Organizations globally use OneTrust to enable the responsible use of data while protecting the privacy rights of individuals, implement and report on their cyber security program, make their social impact goals a reality, and create a speak up culture of trust. Over 14,000 customers use OneTrust's technology, including half of the Global 2,000. OneTrust currently ranks #24 on the Forbes Cloud 100 list of top private cloud companies in the world and employs over 2,000 people in regions across North America, South America, Asia, Europe, and Australia.
Read More