Indian and global regulations — RBI, SEBI, CERT-In, PCI DSS and more.
ISO/IEC 27001:2022 reorganised Annex A into 93 controls across four themes and added 11 new ones. Here is what changed and how to update your ISMS without starting over.
CERT-In requires reportable cyber incidents to be notified within six hours of noticing them. A practical playbook for detection, triage, decision-making and evidence.
RBI's Master Direction on IT Governance, Risk, Controls and Assurance Practices sets clear expectations for boards, IT committees and the CISO. Here is what each must own.
Payment aggregators and gateways regulated by RBI must meet baseline technology and security expectations. A guide to the controls, audits and data storage rules involved.
SEBI's Cybersecurity and Cyber Resilience Framework sets graded obligations for market participants. Here is how to identify your category and build a compliant programme.
The PCI DSS v4.0 requirements that were best practice until March 2025 are now mandatory. What changed, where organisations struggle and how to evidence compliance.
Curated advisories, compliance updates and research — delivered every Monday.
