Compliance archives
10 posts
How a missing kernel flag broke FIPS-certified containers in managed Kubernetes
By Lidia Luna Puerta, 28 September 2026
A customer building a FedRAMP-compliant deployment found that Ubuntu Pro 22.04 FIPS container images were silently failing on standard, mainline Linux...
Beyond the 10-year mark: Extending Ubuntu Pro 16.04 LTS security coverage
By Carlos Bravo, 17 September 2026
A decade ago, Canonical launched Ubuntu 16.04 LTS (codenamed “Xenial Xerus”). As a Long-Term Support (LTS) release, it comes with 5 years of standard security...
Finding the blind spot: How Canonical hunts logic flaws with AI
By Miha Purg, 15 May 2026
AI is accelerating and improving how security engineers find and fix vulnerabilities. A new tool developed and used at Canonical, called Redhound, has already...
Canonical achieves IEC 62443-4-1 compliance in Industrial Automation and Control Systems
By Canonical, 18 September 2025
Canonical is proud to announce it has achieved compliance with IEC 62443-4-1 for cybersecurity in Industrial Automation and Control Systems (IACS). Building...
CRA compliance: Things IoT manufacturers can no longer do under the CRA (and what to do instead)
By Stephanie Domas, 7 May 2025
In this blog, I’ll give you a thorough overview of common IoT manufacturer and PDE developer practices that need immediate attention, and how to change or...
The long march towards delivering CRA compliance
By JC Verdié, 30 April 2025
The EU Cyber Resilience Act is here, and in 2027 it will require manufacturers to meet a long list of security and support standards. Here’s our advice to all...
EU Cyber Resilience Act compliance: best practices for IoT manufacturers
By Stephanie Domas, 6 February 2025
The EU Cyber Resilience Act has considerable repercussions for the IoT device manufacturers. In this blog, we explore these new regulatory requirements and...
A CISO’s comprehensive breakdown of the EU’s Cyber Resilience Act (EU CRA)
By Stephanie Domas, 6 February 2025
The CRA is coming, and you need to be prepared. Depending on the Class your product falls into, there could be additional assessment, security, documentation,...
What is SBOM? Software bill of materials explained
By Matthew de Klerk, 10 December 2024
An SBOM boils down to a detailed and accessible list of all the components that make up your software and where they come from. n this article, we’ll examine...
The Cyber Resilience Act: What it means for open source
By Stephanie Domas, 13 August 2024
Canonical CISO Stephanie Domas outlines the community response to the EU Cyber Resilience Act and explores how it will affect enterprises using open source software.