Latest Articles

If your business had more than SAR 187,500 in VAT-taxable revenue in any year from 2022 to 2025, it falls under ZATCA’s Wave 25 criteria. The authority announced this group in July 2026, giving affected businesses until 1 February 2027 to connect their e-invoicing solutions to Fatoora. For some small businesses, this means their billing […]

Your organisation may collect customer details, store employee records and share personal data with cloud providers or business partners. If someone asked your team to explain why this data is collected, where it goes and what allows you to use it under Saudi Arabia’s Personal Data Protection Law pdpl sdaia, could you give a clear […]

Selecting a penetration testing service provider is not only about getting the most competitive price. Security teams need to prove that the test will be technically correct, independently reviewed, and meet compliance needs. This is where CREST penetration testing cost becomes important when choosing a vendor. CREST has more than 500 members worldwide. It gives […]

A model can pass its way through every access check, every consent audit, every retention review your data team runs, and still make a decision nobody would sign off on if they actually saw it happen. In 2019, researchers publishing in Science found a healthcare algorithm managing care for over 200 million US patients assigned […]

A hospital collects patient records. An insurance company asks for medical details. A software company stores health information for clinics. All three deal with sensitive data, but they may not have to follow the same privacy law. This is what makes PHIPA vs PIPEDA an important question for Canadian businesses. PIPEDA covers personal information used […]

Many companies undergo penetration testing for cyber insurance, expecting it to reduce their cyber insurance premium. It is not that simple. Cyber policies are highly customised, and insurers assess much more than one security test when deciding terms and pricing.  A pentest provides evidence. It can show where an attacker may get in, which weaknesses […]

ISO 27001 controls are the measures an organization uses to manage information security risks. They can include policies, technical protections, access rules, monitoring activities, and other safeguards used within an Information Security Management System. The important part is not simply having controls in place. You need to choose the right ones, apply them correctly, keep […]

Here’s a number worth knowing first. Organisations with Cyber Essentials are 92% less likely to make a claim on their cyber insurance, according to the NCSC’s review of the scheme’s first decade. That comes from the insurer’s own data, so it counts claims, not every breach. It’s still striking for a scheme built on just […]

Meeting UK medical device regulation requirements can be difficult for companies launching their devices in the UK market. Issues such as classification, conformity assessment, technical documentation, registration, and post-marketing aspects need to be dealt with first. Regulatory changes are also taking place. According to the MHRA 2026 report, about 90% of medical devices in Great […]