Latest Articles

Introduction: The Growing Weight of Data Privacy in Qatar Your systems are encrypted, access is locked down, and the last pen test looked solid. Then the National Cyber Security Agency asks for the Data Protection Impact Assessment on that new payment platform you launched last quarter, and you realise there is no document to hand […]

A lab may produce the right result, yet still face a serious problem if the system carrying that result cannot be trusted. Today, diagnostic information often moves through connected instruments, software, cloud services, and APIs before it reaches the people who use it. A weakness anywhere along that route can expose patient data or disrupt access […]

Getting ready for a HITRUST assessment becomes challenging once you consider that penetration testing is just a normal security procedure. Even once the testing process is completed, issues arise due to deficiencies within the HITRUST penetration testing requirements, scope, remediation, or retesting. Knowing what the requirements are for such tests is crucial for any entity […]

Twenty European jurisdictions have now formally adopted the TIBER EU framework, according to the ECB’s own published list, spanning everywhere from Germany and France to Iceland and Malta. That’s not a framework sitting quietly in a policy drawer somewhere in Frankfurt. It’s become the default language European regulators use when they talk about testing whether […]

A CE compliance certificate may support market access, but it does not make weak security controls stronger. The underlying evidence still has to show that the device meets the applicable safety and cybersecurity requirements. That evidence now matters beyond the regulatory file. RunSafe Security’s 2026 Medical Device Cybersecurity Index found that 56% of surveyed healthcare […]

Since July 31, 2024, delivering penetration testing or incident response services to Dubai government, semi-government, or critical information infrastructure entities has required Cyber Force certification, a joint accreditation programme run by the Dubai Electronic Security Center and CREST. Get this decision wrong, and the consequence isn’t just a weaker security report. A provider without current […]

Selling a medical device across Europe and Great Britain now comes with a regulatory choice that did not exist before Brexit. Manufacturers need to consider two conformity systems, different market access routes, and separate regulatory responsibilities depending on where the device will be sold. For many companies, the decision is not simply UKCA versus CE. […]

Cybersecurity can complicate CE marking long before a device reaches the market. For manufacturers, understanding CE mark medical device cybersecurity requirements becomes especially important when a product includes software, connected interfaces, or remote access features. The risk is already visible across healthcare environments. Claroty’s 2025 research across 351 healthcare organizations found known exploited vulnerabilities in […]

Your NIA compliance audit is six weeks away. The NCSA-accredited auditors will arrive with a clear checklist built around the National Information Assurance Standard (NIA) V2.1. Your team has been scanning, patching, and reporting “ready.” Then you open the actual requirements and realise the work you have been doing does not map to what they […]