10.0Oct 29
KeyDrift malware deployed through a Cisco SD-WAN auth bypass
Why it matters hereLogical access and vulnerability management controls (CC6.1, CC7.1) need current evidence, not last quarter's.
CVE FeedPlatform / Compliance Hub
Compliance Hub
Compliance evidence that keeps up with the threats.
Control evidence, versioned policies, workforce training and auto-issued certificates share one data model. When attackers start using a new flaw, the controls that cover it are the ones your auditor and your buyers will ask about.
6Auto-issued certificates
87Normalized objectives
DailyCertificate checks
1Audit trail
This week in the feeds
What changed this week, and the control it tests
HighOct 30
Fake IT help-desk callers talk staff into remote sessions
Why it matters hereTraining completion is evidence. The attack shows why the certificate threshold is 80%, not optional.
Breach WatchRuleJan 1, 2027
Colorado automated decision-making rules take effect
Why it matters hereNew obligations land in the policy library with an owner and an acknowledgement cycle.
Regulatory WatchCompliance Hub
Verified Diligence by Verisq
Program-level certificates issue daily when the evidence supports them, with framework mappings embedded.
✓
Workforce Awareness TrainingIssued at 80% completion
Issued daily✓
HIPAA/PHI Workforce Training95% completion · §164.530(b), §164.308(a)(5)
Issued daily✓
Policy Management ProgramOne published policy, acknowledged within 12 months
Issued daily✓
Risk Acceptance DecisionPer decision · COSO, NIST CSF GV.RM-2
Issued daily✓
SOC 2 ReadinessAll TSC controls Operating Effectively
Issued daily✓
GDPR Compliance ProgramRoPA published, DSAR SLAs met, DPA coverage
Issued dailyVCF
Built on the Verisq Control Framework
Controls, policies and training map to VCF objectives, so one piece of evidence credits every framework that asks for it.
87objectives663mappings339+empty by design
See the coverage mapCapabilities
What the Hub ships with
Policies and training
Versioned policies, staff acknowledgements and awareness training, with completion evidence for the auditor.
Framework Intelligence
Cross-framework mapping, evidence reuse, a coverage matrix and gap analysis across SOC 2, HIPAA, GDPR and NIST CSF.
SOC 2 Type II Readiness
Six-pillar readiness, three-tier ownership, auditor read-only access, sample testing and a bridge document.
CUEC Extraction
Upload a SOC 2 report and extract its CUECs, then gap-check them against your controls.
Audit Packet
On-demand PDF with certificates, framework coverage, vendors, risk register, training and an evidence index.
Compliant Marketing Lists
Outbound lists scrubbed against DSAR opt-outs, Do Not Sell, consent expiry and jurisdiction defaults.
How it works
From threat to tested control
01 · Signal
A flaw is exploited
CISA adds a CVE to KEV and LiveThreat matches it to your stack.
CVE-2026-20127 · KEV
02 · Control
The mapped control is flagged
Vulnerability management evidence is checked for freshness against the new exposure.
CC7.1 · evidence 14 days old
03 · Proof
Evidence is refreshed
The owner attaches the patch record and the certificate stays current.
CC7.1 · Operating · today
Step examples are illustrative.
One platform behind every page
Verisq Control FrameworkCompliance HubVendor Risk HubPrivacyOps HubRiskOps HubData RoomsTrust Center
See it running on today's threats.
A 30-minute walkthrough on your own vendors, your own domain and this week's feed.