- Home
- Insights
Insights
Practical reads on the standards I assess every day, and a regular Data Breach Watch with the lessons for audit and incident response.
Data Breach Watch: 27 October to 5 November 2026
The $6.3bn Binance theft, a supplier-led heist at Crédit Mutuel Arkéa, card data at Revolve, RBI cyber scrutiny, a DFSA fine for Moody's and five lessons.
Read articleData Breach Watch: 12–26 October 2026
SBI's dark-web leak, ransomware claims against DIFC and Gulf firms, Capcom, ASOS and LiteLLM, new GDPR enforcement, and five lessons for audit and incident response.
Read articleData Breach Watch: September 2026
Revolut, DriveWealth, Bitget and BigCommerce incidents, a UAE ransom demand, new GDPR fines, DPDP and PDPL status, and five lessons for audit and incident response.
Read articleNIST CSF 1.0 vs 1.1 vs 2.0: what actually changed
A short comparison of the three NIST Cybersecurity Framework versions, from the original five functions to the new Govern function in CSF 2.0.
Read articleSWIFT CSCF v2026: what has changed
Control 2.4 becomes mandatory and customer connectors move into mandatory scope. What the SWIFT CSCF v2026 changes mean for this year's attestation.
Read articleWhat is PCI KMO? The new key management standard explained
PCI SSC published the Key Management and Operations (KMO) Standard v1.0 in September 2026. What it covers, who it affects and how to prepare.
Read article