Day: August 15, 2026

BSI C5:2026 explained — the EUCS Substantial alignment, the new subcriteria structure, sharpen versus complement, and the new…

CSA STAR explained — the Cloud Controls Matrix, the free Level 1 self-assessment, Valid-AI-ted scoring, and the new…

StateRAMP has been renamed GovRAMP. The verification pathway, the 60 Core controls, the overlays, and why TX-RAMP is…

ITIL 4 explained, and where it stands now that ITIL (Version 5) is released — what carries over,…

COBIT 2019 explained — the 40 governance and management objectives, the five domains, the design factors that tailor…

ISO 37001:2025 is the current edition and the 2016 standard is withdrawn. What the anti-bribery management system requires,…

CCPA compliance changed on 1 January 2026. The risk assessment, ADMT and cybersecurity audit deadlines, read from the…

ISO 31000:2018 explained — the three components, why there is no certification, and the third edition now at…

A practical guide to CIS Controls v8.1 — the 18 Controls, the 153 Safeguards, and how the three…

Cyber Essentials certification explained: the five technical controls, why scope decides the outcome, and the four failures that…

FedRAMP authorization has changed. 20x is past the pilots and in wide-scale adoption, Key Security Indicators replaced yearly…

CMMC compliance explained: the three levels, the four phases, and why Phase 2 on 10 November 2026 is…