News & Updates

What's changing across the frameworks COPA.cloud supports — CMMC included, alongside SOC 2, ISO 27001, HIPAA, and everything else on your plate.

HIPAA·August 18, 2026

The HIPAA Security Rule overhaul slipped to 2027. That's not a reprieve.

HHS moved the Security Rule rewrite to its long-term agenda. Why the 240-day compliance clock, not the final-rule date, is the deadline that matters.

Read article →
CMMC·July 15, 2026

DoW pauses CMMC Phase 2 rollout — what we know so far

Tracking the suspension, what it does (and doesn't) change for contractors already underway, and how to stay ready regardless of timeline.

Read article →
Industry·March 24, 2026

Why multi-framework compliance is the new normal

SOC 2 alone used to be enough for most SMEs. Not anymore — why customers, regulators, and insurers are all asking for more at once.

Read article →
CMMC·November 14, 2025

CMMC Phase 1 is live: what it means for defense contractors

A look at what's actually required now that Phase 1 self-assessments are underway, and how providers are getting clients ready.

Read article →