Latest Articles

Cybersecurity compliance for cooperative banks in India is no longer limited to maintaining firewalls, antivirus software, and basic IT policies. With the increasing adoption of digital banking, payment integrations, and interconnected financial systems, Chief Information Security Officers (CISOs) must demonstrate that security controls are implemented, tested, and continuously monitored. The NABARD cyber security framework establishes […]

Connecting a healthcare application to the Ayushman Bharat Digital Mission (ABDM) involves more than integrating APIs and generating ABHA numbers. Hospitals, HealthTech startups, electronic medical record platforms, and health information exchange providers must also consider the security of patient data and connected systems.  Choosing among ABDM penetration testing companies in India becomes particularly important when […]

The US Commerce Department’s connected-vehicle rule has been in force since 17 March 2025. Software prohibitions begin with Model Year 2027 and hardware prohibitions with Model Year 2030, and covered importers and manufacturers have to file a Declaration of Conformity every year (BIS). Then in August 2026, CISA put out advisory ICSA-26-216-01 on KARR alarm […]

Why VAPT Reports Get Sent Back   It is the second week of July. A mid-size stockbroker uploads its annual VAPT report to the exchange portal three weeks ahead of the 31 July deadline, and the compliance head breathes out. Four days later, the submission comes back. The auditor’s declaration doesn’t state the CERT-In empanelment period, […]

A financial advisor must comply with regulations, protect the personal data of clients, and ensure that the accounting records are correct. Financial advisors compliance solutions assist organizations in dealing with such issues and also meet the requirements set by the SEC. According to the SEC, in 2026 the total regulatory assets managed by registered investment […]

The device is already FDA cleared. The cybersecurity file passed review in the US, so the Singapore team opted for HSA’s shorter route, expecting a swift assessment. And then the questions began: what operating systems is the software compatible with, where is the traceability matrix linking security risks with controls and tests, and what happens […]

Why Two CERT-In Quotes Can Differ by Lakhs A fintech founder in Bengaluru has two quotes on her desk for the same job: a CERT-In empanelled audit of a web app and its API, needed before a bank partner will sign. One is almost a lakh cheaper, so she takes it. Three weeks later, the […]

DCB0129 and DCB0160 are two standards for NHS clinical risk management in health IT. They ask organisations to appoint a Clinical Safety Officer, look at how their software could harm patients, put controls in place, and keep a written record of the risks and what was done about them. DCB 0129 applies to manufacturers. DCB […]

In February 2026, OpenEMR posted an advisory on its FHIR CareTeam endpoint. A token scoped to a single patient could retrieve care team data for every patient on the system (CVE-2026-24487). The token was genuine, yet the server returned records outside the patient’s compartment. In October 2026, a researcher reported four further flaws in HAPI […]