The Blog
Our place for thought sharing, question answering and news announcing.
DORA Microenterprise Requirements: Everything You Need to Know
Thanks to DORA's principle of proportionality, smaller organisations face lighter requirements than larger financial entities in many areas and are fully exempt from others. Here's what microenterprises need to know.
See more
Expert Advice on DORA Penetration Testing
All DORA-covered entities must test their systems using what DORA refers to as "appropriate tests” to ensure they are resilient. So, what is an “appropriate test”?
See more
What Does a Red Teamer Do? We Asked a Full-Time Red Teamer
What does a red teamer actually do in real life? To give you the full story and a realistic look at what it means to be a red teamer, we asked a full-time SECFORCE red teamer about his day-to-day job.
See more
DORA Major Incident Reporting In 15 Steps
Most of the work involved in DORA incident reporting happens well before an incident occurs across these 15 steps. Organisations must follow this process to prepare for DORA incident reporting.
See more
How Often Should You Pen Test?
We've been helping companies assess and upgrade their penetration testing capabilities for over a decade. Based on that experience, we want to share our thoughts on why it's better to do more frequent pen testing than you likely do at present.
See more
Are You Ready for Purple Team Testing?
When is an organisation ready for purple team testing? Have a look at the exact situations where purple teaming will deliver the most value, purple team testing timelines, and what happens after a purple teaming exercise is done.
See more