Latest Articles

If you run a bank, insurer, e-wallet, or fintech in Malaysia, Bank Negara Malaysia’s Risk Management in Technology (RMiT) rules are not optional. This is the basic standard that decides whether your systems pass BNM checks. Auditors no longer accept one-time security tests that claim everything is fine for a year. They want clear proof […]

Quick Summary: A Predetermined Change Control Plan (PCCP) allows medical device manufacturers to pre-specify and validate future AI/ML algorithm modifications within a marketing submission, such as 510(k), PMA, or De Novo. When planned changes remain within the FDA-authorized PCCP boundaries and follow the approved modification protocol, manufacturers can implement those updates without submitting a new premarket […]

Key Takeaways EU AI Act penalties for prohibited practices have been in effect since February 2025, up to €35 million or 7% of global turnover, with GPAI enforcement and transparency duties landing on August 2, 2026. Gartner found 43% of organisations can’t even produce a full AI inventory, which is usually step one for any […]

Key Takeaways DESC Cyber Force is a certification for providers, not a special type of test. Only Dubai government, semi-government and CII entities must use certified providers. The testing itself is just solid professional penetration testing done by approved companies. Most organisations still find basic problems like weak passwords, missing patches and poor access control. […]

Dubai has built one of the most structured cybersecurity oversight systems in the region. At the center of this system is the Dubai Electronic Security Center, known as DESC, which is a government authority that operates under Digital Dubai. Its mandate comes from Dubai Law No. 11 of 2014. Many people use the term DESC […]

Submitting a connected medical device to the FDA involves more than attaching a few cybersecurity reports to your application. You need to show how your team identified security risks, tested the device, applied controls, and planned to manage vulnerabilities after release. This level of evidence matters because weaknesses in connected devices can lead to serious […]

A GDPR audit may begin with a documentation review, but missing or outdated records can quickly turn the process into a compliance challenge. GDPR Enforcement Tracker has recorded a total of 3202 cases under GDPR till now, of which 156 cases have happened in the year 2026, with a fine of €6.31B. Security tests are […]

Your AI model can pass every internal safety test, but you can’t guarantee full safety when a real user tries to break it. A hacker will manage to manipulate the algorithm and bypass the preloaded instruction set. That would give the hacker access to important information as well as the opportunity to perform prohibited actions. […]

Someone requests information about your organization and nobody knows how to respond because you’ve never properly documented what information you hold or where it is stored. Your management team realizes you probably need something called a PAIA manual, but nobody’s certain what that means. You wonder whether the Promotion of Access to Information Act even […]