Latest Articles

Your team may already run vulnerability scans every quarter. Findings are logged, remediation is tracked and another scan comes around before long. Then DESC ISR penetration testing becomes part of the discussion, and a few uncomfortable questions start coming up. Are the scans enough? What exactly needs to be tested? Who should perform the testing? […]

Australia’s medical device framework is supported by detailed TGA guidance. ARGMD helps you find the information relevant to each stage of the regulatory process. The Australian Regulatory Guidelines for Medical Devices is not a single piece of legislation or one complete regulatory manual. It now works as an index that connects manufacturers and sponsors with […]

Australian businesses often need to show customers and partners how they protect sensitive information. For SaaS companies, technology providers and other data-focused businesses, ISO 27001 Australia certification can provide that assurance. ISO/IEC 27001:2022 sets the requirements for an information security management system ISMS. It helps an organisation manage information security risks within a defined scope. […]

For a private company working with a Dubai Government Entity, there is one question that can be surprisingly difficult to answer: does the Dubai Information Security Regulation (ISR) apply to us, or are its requirements only for the government organisation? The confusion is easy to understand. A private company may provide IT services, manage systems, […]

A tender document names CHECK penetration testing as a hard requirement. The compliance team pulls up its usual supplier list, only to find most of those firms hold CREST accreditation, not CHECK. The two get treated as interchangeable in casual conversation, but a procurement officer checking credentials against a government contract will not accept one […]

An ADHICS audit can become uncomfortable long before an auditor finds a missing policy. The difficult questions usually start with evidence. Was every system handling health information covered by testing? Did the scope include APIs, internet-facing applications, cloud services and connected medical devices? If weaknesses were found, can your team show they were fixed and […]

The Cyber Security and Resilience Bill just cleared a real milestone. It sits in the House of Lords as HL Bill 32, with Grand Committee scrutiny running across four sittings in September 2026. Peers have tabled dozens of amendments, including proposals on AI governance, vendor powers, and potential personal liability for company directors. Meanwhile, the […]

Most ransomware and business email compromise cases investigated in Singapore don’t trace back to some sophisticated zero-day attack. They trace back to unsupported software still running in production, an admin account nobody remembered to lock down, or a backup that turned out not to actually restore when it mattered. The CSA Cyber Essentials Mark exists […]

A market surveillance authority may request the documentation required under the Cyber Resilience Act as part of its enforcement activities. Regulation (EU) 2024/2847 requires manufacturers to prepare technical documentation before placing a product with digital elements on the EU market and keep it at the disposal of market surveillance authorities. That obligation runs for at […]