A highlight of what the future holds for GRC platforms and solutions.

← Back to Blog

A highlight of what the future holds for GRC platforms and solutions. As the Executive Order(EO) signed on June 5th 2025 sets out a clear direction for cybersecurity risk management oversight and assurance. With instructions to Federal Agencies to develop ‘Policy As Code’ translating governance, risk management, and compliance policies into machine-readable formats enabling automation of the risk management process.

The EO sets out requirements for NIST, CISA and OMB to establish a pilot program of a rules-as-code approach for machine-readable versions of policy and guidance that OMB, NIST, and CISA publish and manage regarding cybersecurity. Rules as code enables the automation of the oversight and assurance of cybersecurity controls, set out in frameworks such as NIST SP 800-53, CSF or CMMC, through the development of controls automation (Section 7). Control effectiveness testing is a significant component of risk management. It enables an understanding of residual risk. Rules as code enables Continuous Diagnostic Mitigation (CMD).

https://lnkd.in/eP-QeQTE

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC

#cybersecurity #cyberriskmanagement #cybergovernance

https://lnkd.in/ePnxhSPR

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7350810240453337088