Security

24

Feb

A Guide on How to Not Get Hacked

• Nicolas Montauban
• Cybersecurity, hacking, Information Security, Security

Have you every been hacked? It sucks right? But don’t worry now, let’s make sure […]

Read Article

27

Jan

What is NIST SSDF and how should you implement it?

• Nicolas Montauban
• NIST, NIST SSDF, Security

In today’s rapidly evolving digital landscape, ensuring software security is more critical than ever. Recognizing[…]

Read Article

12

Dec

HIPAA Implementation: A Guide to Compliance

• Mahe Pereira
• Compliance, Cybersecurity, Privacy by Design, Security

HIPAA, the Health Insurance Portability and Accountability Act of 1996, is a critical federal law[…]

Read Article

07

Dec

NIST 800-53 and NIST 800-171: Key Differences

• Aram Hovsepyan
• Compliance, Cybersecurity, NIST SSDF, Privacy by Design, Security, Software security

The U.S. cybersecurity strategy seems to be lightyears ahead of the EU. I strongly believe[…]

Read Article

29

Nov

BSIMM (Building Security In Maturity Model): A Complete Guide

• Nicolas Montauban
• Application Security, BSIMM, SAMM, Security, SSDLC

Application security is a complex discipline. To make things even harder for us, it is[…]

Read Article

05

Sep

What is the Cyber Resilience Act (CRA) and how to comply with it

• Dag Flachet
• Privacy by Design, Security

It this article we explore the essentials of the EU Cyber Resilience Act (CRA), and[…]

Read Article

10

May

How to do SAMM assessments: Everything you need to know

• Michaella Masters
• Application Security, OWASP, Privacy by Design, SAMM, Security

Want to get started with SAMM?  We have just the thing! Take the free OWASP[…]

Read Article

12

Apr

Reporting with OWASP SAMM

• Dag Flachet
• OWASP, SAMM, Security

How to use OWASP SAMM for effective communication on security? Reporting with OWASP SAMM is[…]

Read Article

17

Nov

ISO-27001 2013 vs ISO-27001 2022: What’s changed?

• Leo Dahlgren
• ISO 27001, Security

  Official resources ISO 27001:2022 ISO 27001:2013 OWASP SAMM CRA NIST SSDF

Read Article

26

Sep

A comparison of NIST CSF 2.0 and OWASP SAMM

• Aram Hovsepyan
• NIST SSDF, OWASP, Security

NIST has finalized the Cybersecurity Framework (CSF) 2.0. CSF 2.0 focuses on understanding, assessing, prioritising,[…]

Read Article

12

May

Is SOC 2 Worth it?

• Leo Dahlgren
• ISO, Security

Is SOC 2 Worth It? In this blogpost we will be discussing SOC 2, what[…]

Read Article

01

May

Is ISO 27001 Worth It?

• Leo Dahlgren
• ISO, Security

Is ISO 27001 worth it? In this blogpost we will be discussing ISO 27001. What[…]

Read Article