NIST SP 800-161 Rev. 1, titled “Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations,” offers comprehensive guidance for organizations to identify, assess, and mitigate cybersecurity risks across their… Read More »NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations
The EU Digital Operational Resilience Act (DORA) is a regulation that came into effect on January 17, 2025, aimed at strengthening the digital resilience of financial entities across the EU.… Read More »EU Regulation 2022/2554 Digital Operational Resilience Act (DORA)
The NCSC Cyber Assessment Framework (CAF) v3.1 provides a systematic and comprehensive approach for organisations-particularly those managing essential functions or critical national infrastructure-to assess and improve their cyber resilience and… Read More »NCSC Cyber Assessment Framework V3.1
The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8
The Zero Trust Maturity Questionnaire is designed to help organizations evaluate their current level of Zero Trust implementation across key security domains. It assesses maturity in areas such as identities,… Read More »MicroSoft Zero Trust Maturity Questionnaire
This community-led framework identifies the most critical security risks inherent in Continuous Integration and Continuous Deployment (CI/CD) ecosystems, which have become prime targets for supply chain attacks. It provides a… Read More »OWASP Top 10 CI/CD Security Risks
The latest version of ISO/IEC 27002 was published on February 15, 2022. This 2022 revision replaced the previous 2013 edition and introduced significant changes including a reduction in the number… Read More »ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls ★★★★★
NIST SP 800-218, the Secure Software Development Framework (SSDF), provides a set of high-level, fundamental practices designed to integrate security throughout the software development lifecycle (SDLC). The framework is organized… Read More »NIST SP 800-218 Secure Software Development Framework (SSDF)
The CISA Zero Trust Maturity Model (ZTMM) is a comprehensive framework designed to guide organizations, particularly federal agencies, in transitioning from traditional perimeter-based security to a zero trust architecture, which… Read More »CISA Zero Trust Maturity Model
The CSA publication “Practical Preparations for the Post-Quantum World” by the Quantum-Safe Security working group of the Cloud Security Alliance addresses the emerging cybersecurity challenges posed by the advent of… Read More »CSA Practical Preparations for the Post-Quantum World ★★★★★