Latest Articles

Here’s a number worth knowing first. Organisations with Cyber Essentials are 92% less likely to make a claim on their cyber insurance, according to the NCSC’s review of the scheme’s first decade. That comes from the insurer’s own data, so it counts claims, not every breach. It’s still striking for a scheme built on just […]

Meeting UK medical device regulation requirements can be difficult for companies launching their devices in the UK market. Issues such as classification, conformity assessment, technical documentation, registration, and post-marketing aspects need to be dealt with first. Regulatory changes are also taking place. According to the MHRA 2026 report, about 90% of medical devices in Great […]

Your team may already run vulnerability scans every quarter. Findings are logged, remediation is tracked and another scan comes around before long. Then DESC ISR penetration testing becomes part of the discussion, and a few uncomfortable questions start coming up. Are the scans enough? What exactly needs to be tested? Who should perform the testing? […]

Australia’s medical device framework is supported by detailed TGA guidance. ARGMD helps you find the information relevant to each stage of the regulatory process. The Australian Regulatory Guidelines for Medical Devices is not a single piece of legislation or one complete regulatory manual. It now works as an index that connects manufacturers and sponsors with […]

Australian businesses often need to show customers and partners how they protect sensitive information. For SaaS companies, technology providers and other data-focused businesses, ISO 27001 Australia certification can provide that assurance. ISO/IEC 27001:2022 sets the requirements for an information security management system ISMS. It helps an organisation manage information security risks within a defined scope. […]

For a private company working with a Dubai Government Entity, there is one question that can be surprisingly difficult to answer: does the Dubai Information Security Regulation (ISR) apply to us, or are its requirements only for the government organisation? The confusion is easy to understand. A private company may provide IT services, manage systems, […]

A tender document names CHECK penetration testing as a hard requirement. The compliance team pulls up its usual supplier list, only to find most of those firms hold CREST accreditation, not CHECK. The two get treated as interchangeable in casual conversation, but a procurement officer checking credentials against a government contract will not accept one […]

An ADHICS audit can become uncomfortable long before an auditor finds a missing policy. The difficult questions usually start with evidence. Was every system handling health information covered by testing? Did the scope include APIs, internet-facing applications, cloud services and connected medical devices? If weaknesses were found, can your team show they were fixed and […]

The Cyber Security and Resilience Bill just cleared a real milestone. It sits in the House of Lords as HL Bill 32, with Grand Committee scrutiny running across four sittings in September 2026. Peers have tabled dozens of amendments, including proposals on AI governance, vendor powers, and potential personal liability for company directors. Meanwhile, the […]