Politics

Important regulations impact banks in challenging but beneficial ways. Learn about them and our key recommendations to ensure a robust security posture.

Companies that store, handle or transfer account data must comply with PCI DSS v4.0 from March 31. We summarize its 13 new requirements to be met on that date.

Following the steps of some in Europe, the U.S. advances in its cybersecurity labeling program to help consumers choose IoT devices more resistant to attacks.

After evidencing statement and branch coverages above 90% and other high-level best practices, our open-source project Universe got the rare OpenSSF gold badge.

Learn about the draft Cyber Resilience Act, including its purposes, obligations and penalties, before its final version comes.

We briefly introduce the NIS 2 Directive and pay special attention to its cybersecurity training requirement for organizations' boards of directors.

CISA and other agencies published a guide encouraging organizations to offer their customers secure-by-design and secure-by-default products.

Learn about the cybersecurity strategy announced by the Biden-Harris Administration, specifically, the issues it aims to address and the pillars it is based on.

We present whether penetration testing is required for compliance with these security standards: GDPR, GLBA, HIPAA, ISO 27001, PCI DSS, SOC 2 and SWIFT CSCF.