Today’s Stories, Governance Lens — September 26, 2026

The US Treasury Department’s Financial Crimes Enforcement Network (FinCEN) has issued new guidance on implementing anti-money laundering (AML) regulations for virtual asset service providers (VASPs). This move aims to strengthen the regulatory framework for cryptocurrencies and other digital assets, increasing transparency and risk management requirements for VASPs. A CISO should review their organization’s current policies and procedures to ensure compliance with these new guidelines.

Regulatory implications are significant, as non-compliance could result in fines and reputational damage. The updated guidance also highlights the need for VASPs to implement robust due diligence processes to identify and mitigate risks associated with cryptocurrency transactions.

In response, a CISO should engage with their organization’s finance team to ensure that adequate risk assessments and mitigation strategies are in place. This may involve updating policies and procedures to reflect the new guidelines and conducting regular training for staff on AML regulations and best practices.

The European Union has issued a warning about the risks of quantum computers, stating that Q-Day could arrive sooner than expected due to advancements in commercial viability. This poses significant challenges for organizations relying on traditional encryption methods, as they may be compromised by quantum attacks.

Businesses should consider upgrading their encryption technologies to post-quantum cryptography solutions to protect against these emerging threats. This may involve investments in new software and hardware, as well as changes to organizational policies and procedures.

The UK government has implemented a service-led approach to cyber governance, shifting from traditional command-and-control models to more collaborative and flexible frameworks. This move aims to improve the nation’s cybersecurity posture by leveraging industry expertise and best practices.

Organizations should engage with this new framework by participating in relevant industry initiatives and sharing their own expertise and experiences. By doing so, they can help shape the development of effective service-led cyber governance models that meet the needs of both public and private sector organizations.

The US Department of Homeland Security has released its 2026 Election Infrastructure Security Plan, outlining measures to protect election systems from cyber threats. This plan highlights the ongoing importance of election security and provides guidance for states and local governments on how to enhance their defenses.

State and local governments should review this plan and assess their current cybersecurity posture to identify areas for improvement. They may also want to engage with their CISOs and other technical experts to develop targeted strategies for enhancing election infrastructure security.

Boardroom Takeaway: Organizations should prioritize the implementation of post-quantum cryptography solutions to protect against emerging quantum computer threats.

A strategic companion to the daily CyberNews digest. Compiled daily.