Expert analysis on ISO 27001, RBI and SEBI regulation, DPDP Act, ransomware defence, zero trust, cloud security and CISO leadership from the Open Security Alliance advisory practice.
ISO/IEC 27001:2022 reorganised Annex A into 93 controls across four themes and added 11 new ones. Here is what changed and how to update your ISMS without starting over.
Ransomware is a business-continuity event, not an IT incident. A board-level checklist covering backups, identity, detection, decision rights and recovery testing.
CERT-In requires reportable cyber incidents to be notified within six hours of noticing them. A practical playbook for detection, triage, decision-making and evidence.
The Digital Personal Data Protection Act changes how Indian organisations collect, use and protect personal data. A step-by-step readiness roadmap with ownership and evidence.
RBI's Master Direction on IT Governance, Risk, Controls and Assurance Practices sets clear expectations for boards, IT committees and the CISO. Here is what each must own.
Payment aggregators and gateways regulated by RBI must meet baseline technology and security expectations. A guide to the controls, audits and data storage rules involved.
SEBI's Cybersecurity and Cyber Resilience Framework sets graded obligations for market participants. Here is how to identify your category and build a compliant programme.
SOC 2 reports build trust with enterprise customers, but Type I and Type II answer different questions. Learn the difference, timelines and how to prepare for each.
Zero trust does not require a multi-year rebuild. A 12-week identity-first roadmap to replace broad VPN access with per-application, policy-based access.
Curated advisories, compliance updates and research — delivered every Monday.
