Qualysec

Blog

Latest Articles

Page 8 of 165 · 1477 posts

The Ultimate AI Governance Compliance Checklist

September 23, 2026

The Ultimate AI Governance Compliance Checklist

AI adoption inside enterprises isn’t slowing down to let governance catch its breath, and regulators have made it clear they won’t wait either. Flying blind, deploying models without a documented inventory, without risk classification, without any real testing behind the guardrails, isn’t a viable posture anymore. Under the EU AI Act, prohibited practices have carried […]

What the CREST AI Charter Means for Enterprise Security Buyers

September 23, 2026

What the CREST AI Charter Means for Enterprise Security Buyers

The CREST AI Charter gives security buyers a clear way to understand how cybersecurity providers should use AI in their institutions. You should know how a CREST AI-accredited provider handles your data, validates AI-generated outputs, manages third-party models, and maintains human oversight. The charter addresses these concerns through a set of principles for responsible AI […]

SFC Penetration Testing Requirements in Hong Kong When Is It Required

September 23, 2026

SFC Penetration Testing Requirements in Hong Kong: When Is It Required?

Hong Kong financial firms operate under strict regulatory and cybersecurity requirements. For firms supervised by the Securities and Futures Commission (SFC), cybersecurity is not limited to protecting networks and data. Firms must also identify, manage and address technology risks that could affect clients, trading systems and business operations. This raises an important question: Does the […]

Atlassian Security Compliance Requirements, Risks, and Best Practices

September 23, 2026

Atlassian Security Compliance: Requirements, Risks, and Best Practices

Jira and Confluence are no longer used only for basic project tracking or internal notes. Many businesses now rely on them for day-to-day operations, sensitive information, approvals, development work, and customer-related processes. Marketplace apps can add even more access to that environment. Because of this, Atlassian security compliance cannot be judged by Atlassian’s certifications alone. […]

How to Pass the Property Finder Developer Network (PFDN) Security Audit A VAPT Blueprint for CRMs

September 22, 2026

How to Pass the Property Finder Developer Network (PFDN) Security Audit: A VAPT Blueprint for CRMs

The Property Finder Developer Network (PFDN) is a dedicated integration platform that connects real estate CRMs, proptech tools, and digital marketing software with Property Finder, one of the region’s leading property portals. It allows these platforms to exchange listings, broker information, leads, and other data through APIs. However, connecting to PFDN involves more than configuring […]

Featured image for How SBOM Supports the Secure Product Development Framework (SPDF): Mapping Components to FDA Cybersecurity Requirements

September 22, 2026

How SBOM Supports the Secure Product Development Framework (SPDF): Mapping Components to FDA Cybersecurity Requirements

The U.S. Food and Drug Administration (FDA) now enforces strict software transparency requirements through Section 524B of the FD&C Act for medical device manufacturers. As part of your Secure Product Development Framework, the FDA’s automated eSTAR system instantly verifies your software inventory upon submission. When you submit an SBOM report with static spreadsheets, missing data […]

Meeting DFSA Cyber Security Compliance: A Complete Checklist for DIFC FinTechs

September 22, 2026

Meeting DFSA Cyber Security Compliance: A Complete Checklist for DIFC FinTechs

You have a cybersecurity policy. You have a penetration testing report. Your employees complete security training, your backups are running, and you may even have an ISO 27001 certification. If DFSA asked you to prove that all of this is part of a properly managed cyber risk programme, could you explain how it fits together? […]

The Ultimate DPDP Act Compliance Framework Audit and Testing Checklist

September 22, 2026

The Ultimate DPDP Act Compliance Framework: Audit and Testing Checklist

The Technical Reality of DPDP Act Compliance Most Indian organisations are treating 13 May 2027 as a distant date. It is roughly eight months away, and the work sitting behind it is engineering work, not legal drafting. That is the part that the market keeps getting wrong. When the Digital Personal Data Protection Act, 2023 […]

Penetration Testing for Atlassian Marketplace Security Requirements, Risks and Testing Process

September 21, 2026

Penetration Testing for Atlassian Marketplace Security: Requirements, Risks and Testing Process

For SaaS companies, the Atlassian Marketplace can open the door to a huge pool of businesses already using Jira, Jira Service Management, and Confluence. Atlassian says the Marketplace now has more than 6,000 apps, over 2,000 partners, and more than $6 billion in lifetime sales.  But getting an app in front of those buyers is […]

"Don't compromise between depth and speed. Own both. Connect with Swagat, Your trusted penetration testing advisor."

Swagat Kumar Dash

Swagat Kumar Dash

Head Of Business Development