Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Legislation

Why DORA Makes MTTR the Board's Business

Based on our reading, the Digital Operational Resilience Act (DORA), is at a fundamental level, a transformative ICT challenge. DORA makes the speed and accuracy of security threat detection and response a board-level concern. Fail to stop, classify and report on cyber incidents accurately and, from 2025 onwards, your organisation could face a fine of 1% of global turnover.

Software Liability Comes to the EU: Navigating New Compliance Challenges

The European Union has taken a significant step by introducing a directive to update the EU’s civil liability law that extends the definition of "defective products" to include software. These pivotal liability rules hold manufacturers accountable for harm caused by software vulnerabilities, urging them to prioritize cybersecurity and compliance. Here’s how manufactures should think about navigating these new compliance challenges.
Featured Post

Building a Modern Identity Capability to Tackle DORA

Hackers are quickly taking advantage of every vulnerability in an organisation's armoury, particularly exploiting poorly managed identities. An organisation might have the strongest firewalls, encryption, anti-malware, vulnerability scanners, and risk management tools in the world, but if identities are not managed securely, this still leaves one critical gap in its cybersecurity arsenal.

Is the ASX 200 Resilient to Cyber Threats? Our Report Says No.

In today’s rapidly evolving digital landscape, managing cyber risk has become essential for sustaining corporate growth and resilience. Cyber risk management requires balancing corporate growth against the evolving tactics of threat actors and governmental regulations – a daunting task that requires continuous measurement and strategic reflection.

How DORA Will Affect the Digital Asset Space

This January, the EU’s Digital Operational Resilience Act (DORA) will come into force, along with a number of other EU crypto regulations, and it is poised to usher in a new era for technology providers – in both the traditional and digital asset markets. Fireblocks is ready for this transition, and we’ve been helping our clients prepare for the new digital asset regulations in recent months as the deadlines approach.

Getting Ready for Saudi Arabia's PDPL with Netskope

Saudi Arabia’s new Personal Data Protection Law (PDPL), guided by the Saudi Data and Artificial Intelligence Authority (SDAIA), brings strict data protection requirements for organizations across the Kingdom. If your business is still working to put strong data loss prevention (DLP) measures in place, preparing for compliance might feel daunting. That’s where Netskope comes in—our local presence and advanced data protection solutions make PDPL compliance easier and more efficient.

What is GDPR Compliance? Understanding the Role of DLP

General Data Protection Regulation Compliance, also known as GDPR Compliance, is the European Union’s foundation law on data privacy and security. The objective of GDPR is to provide individual’s control over their personal data from how it’s collected to how it’s use, shared, and storage.

CMMC 2.0, CORIE, DORA: Navigating Global Cybersecurity and Resilience Standard

Cybersecurity and operational resilience are paramount for organizations, especially those handling sensitive information. Three prominent compliance standards— the US CMMC 2.0, the Australian CORIE, and the EU’s DORA —address these needs in different sectors and regions. This blog will compare and contrast these standards, highlighting their unique features, similarities, and differences.

The Digital Operational Resilience Act (DORA) is coming - are you ready?

As the official implementation date approaches for the Digital Operational Resilience Act (DORA) – financial institutions and their information and communication technology (ICT) service providers, across the European Union are gearing up for a significant shift in their operational landscape.

Understanding the Impact of the NIS2 Directive on Managed Service Providers (MSPs)

With cybersecurity threats on the rise, regulatory bodies are taking robust measures to secure essential infrastructure. The European Union’s introduction of the NIS2 Directive marks a significant step in this direction, aiming to fortify the defenses of critical sectors across Europe. Managed Service Providers (MSPs) play a pivotal role in safeguarding networks and information systems, and the new NIS2 requirements underscore the heightened responsibilities they face.