Library
Comparisons, practical guides and technical explainers. Browse by type or by framework, not just by date.
4 articles
AI governance
ISO/IEC 42001, the NIST AI RMF and the EU AI Act are often mentioned together. One is a certifiable standard, one a voluntary framework, one binding law — and that changes everything.
Practical guide
72 hours, 'without delay', 60 days: how breach notification deadlines, thresholds and recipients differ under GDPR, the DPDP Rules 2025 and HIPAA — and how SOC teams should prepare.
Technical explainer
Authorised penetration testing starts long before the first scan. What to agree on scope, authorisation, rules of engagement, reporting and retesting — and what frameworks like PCI DSS expect.
Comparison
SOC 2 is an attestation report; ISO/IEC 27001 is a management-system certification. How they differ in scope, evidence, audience and effort, and when you need both.