Updated 19 hours ago ()
Regulatory and advisory signals
What are regulators and advisory bodies publishing, and what should I act on?
796 advisories, recalls, notices and drafts were published in this period. Federal Register 57%, FDA recalls 31%, CISA 9%. 248 of them concern medical devices directly (CISA medical advisories and FDA recalls).
What this means for you
796 advisories, recalls, notices and drafts were published in this period.
Do this next
This chapter's program actions come with a subscription
The flow
What regulators and advisory bodies are publishing
Vulnerability and guidance items per month
796 vulnerability and guidance items were published in the selection; the largest stream is Federal Register (57%), and the most frequent tags are Health and Human Services Department, Notice, health IT.
How this is calculated
Counts every vulnerability and guidance item published in the selected years (CISA advisories, FDA device recalls with software or cybersecurity causes, Federal Register notices, NIST drafts and news); the breach filters do not apply to them. Tags come from each source; domains come from the site's CISSP/CISM/CISA keyword heuristic. The lagged correlation compares monthly vulnerability items with monthly Hacking/IT reports (breach filters applied) from lag −6 to +6 months, using only months since the vulnerability feed began. Both series have a straight-line trend removed before correlating, so two series that merely both grow over time do not look related; a positive lag means vulnerability volume moves first. It needs 24 months of overlap. Correlation, not causation: both series can move with a third factor (for example reporting practice or feed coverage), and the guide line is a Bonferroni-corrected 5% threshold across the 13 lags (z ÷ √n), which still overstates significance for autocorrelated monthly series.
Items by kind
Federal Register is the largest stream (57%).
Click a bar to read those items in the Signals feed.
Table view
| Federal Register | Federal Register | 454 |
| FDA recalls | FDA device recall | 246 |
| CISA | CISA advisory | 73 |
| NIST drafts | NIST draft for comment | 12 |
| NIST news | NIST news | 9 |
| CISA | CISA medical device advisory | 2 |
Subscriber feature · $5 a month or $50 a year
Read the rest of Chapter 7: Regulatory and advisory signals
- Which domains the signals touch, and whether they move with breaches
- What this means for your program: 2 key points
- 2 program actions mapped to HIPAA and NIST CSF 2.0, starting with “Triage every advisory against your asset inventory”
- Exam angle for 6 CISSP, CISM and CISA domains, with a study prompt
Included with an ExamPrep subscription or as a DueCare site administrator. How linking works