A chronological record of material standards, company, product, incident, and research developments. Each entry preserves what changed, the source class, the market consequence, and the evidence boundary.
UpGuard's release archive records new fourth-party data access and remediation workflow changes. The record establishes an announced product change, not independent proof of implementation depth or package availability.
Official company release record · UpGuard release archive
ISO's lifecycle record shows the 2021 supplier-relationship standard entering systematic review. The review does not itself revise or replace the published edition.
Official standards lifecycle record · ISO standards record
NIST released a finalized guide intended to help organizations establish a minimum viable due-diligence practice for technology suppliers.
Government standard-setting authority · National Institute of Standards and Technology
UpGuard reported analysis of 515 universities, 105,006 vendor relationships, and about 5,400 suppliers. The provider-funded study should be interpreted within its disclosed dataset and method.
Provider-funded research announcement · UpGuard
APRA lists the updated operational-risk standard as in force from July 1, 2026. It connects service-provider oversight to critical operations, resilience, agreements, monitoring, and continuity.
Official prudential standard status · APRA CPS 230 standard page
NIST's revision coordinates security, privacy, and cybersecurity supply-chain risk management planning within the system risk record.
Government standard-setting authority · National Institute of Standards and Technology
OneTrust said compromised OAuth tokens associated with a third-party integration were involved and stated that OneTrust customer tenants were not connected to the incident. The record is the company's account at the stated date.
Official company incident update · OneTrust
SecurityScorecard listed the Driftnet transaction in its company announcement archive. Later product evidence is required to establish the resulting packaging, integration, and buyer-visible workflow.
Official company announcement · SecurityScorecard press archive
APRA finalized limited contractual exemptions, related practice guidance, and an updated Material Service Provider Register template before the standard's July commencement.
Official regulator amendment package · APRA operational-risk consultation record
The companies announced an integration that links corporate ownership and trade intelligence with product, component, and material sourcing context.
Official company announcement · Sayari press release
Policy Statement 7/26 expands reporting attention to material outsourcing and non-outsourcing third-party arrangements and sets March 18, 2027 as the implementation date.
Official prudential policy statement · Bank of England PRA Policy Statement 7/26
ProcessUnity describes its Risk Index as combining controls-based assessment information with externally observed data. The announcement establishes positioning, not independently verified accuracy or outcomes.
Official company announcement · ProcessUnity
ProcessUnity said the study included 1,465 respondents and reported continuing reliance on manual tools. Readers should inspect the full method before using promotional figures as universal benchmarks.
Provider-sponsored research announcement · ProcessUnity and Ponemon Institute
Censinet announced a healthcare-focused benchmarking program spanning cybersecurity, resilience, and AI governance frameworks with several industry sponsors.
Provider-led research announcement · Censinet study announcement
CORL announced a partnership using RiskRecon by Mastercard cyber-risk signals inside its healthcare-focused managed TPRM model.
Official company announcement · CORL Technologies announcement
Sayari announced the acquisition of Mirato to connect its commercial and trade intelligence with AI-assisted TPRM orchestration technology.
Official company announcement · Sayari acquisition announcement
