Latest Articles

The U.S. Food and Drug Administration (FDA) now enforces strict software transparency requirements through Section 524B of the FD&C Act for medical device manufacturers. As part of your Secure Product Development Framework, the FDA’s automated eSTAR system instantly verifies your software inventory upon submission. When you submit an SBOM report with static spreadsheets, missing data […]

You have a cybersecurity policy. You have a penetration testing report. Your employees complete security training, your backups are running, and you may even have an ISO 27001 certification. If DFSA asked you to prove that all of this is part of a properly managed cyber risk programme, could you explain how it fits together? […]

The Technical Reality of DPDP Act Compliance Most Indian organisations are treating 13 May 2027 as a distant date. It is roughly eight months away, and the work sitting behind it is engineering work, not legal drafting. That is the part that the market keeps getting wrong. When the Digital Personal Data Protection Act, 2023 […]

For SaaS companies, the Atlassian Marketplace can open the door to a huge pool of businesses already using Jira, Jira Service Management, and Confluence. Atlassian says the Marketplace now has more than 6,000 apps, over 2,000 partners, and more than $6 billion in lifetime sales.  But getting an app in front of those buyers is […]

Financial organizations in Germany often struggle to decide whether their current security testing meets BaFin regulations. Penetration testing is an important part of BaFin compliance, but the exact requirement depends on the financial institution and the regulatory framework that applies to it. DORA now provides the Information and Communication Technology testing requirements for financial institutions […]

If you provide cloud services, SaaS, managed technology, or outsourced ICT to Australian Government entities, security assurance can become an important part of winning and maintaining government work. A buyer may require evidence that your system or service has undergone an appropriate IRAP assessment before it can be considered for certain environments. IRAP stands for […]

Being informed that your bank is protected by security measures is not sufficient. It is also important to understand if those controls are aligned with the expectations of the HKMA and what your resilience gaps are. In Hong Kong, the HKMA Cyber Resilience Assessment Framework (C-RAF) provides a structured way to assess that position.   The […]

In December 2024, the U.S. Department of Health and Human Services proposed making annual penetration testing an explicit HIPAA requirement. Twenty months later, that proposal is still not law, and the federal Unified Agenda now projects final action in July 2027. Meanwhile, hundreds of vendor pages tell healthcare buyers that HIPAA already mandates an annual […]

NHS organisations and digital health suppliers work with highly sensitive patient data and systems that support day-to-day clinical care. Because of this, penetration testing is an important part of NHS compliance and technical security assurance. The requirement is not the same across every NHS setting. In some cases, testing is part of formal assurance. In […]