CyphrQNIST CSF 2.0 Explained: Six Functions, Profiles and Tiers
What NIST CSF 2.0 is, its six functions including the new Govern function, how Profiles and Tiers work, and why you cannot be certified.
Frameworks & Bodies
COBIT, NIST CSF, cloud security frameworks and the bodies that publish them, such as ENISA.
5 articles
COBIT 2019 Explained: Objectives, Design Factors and Audits
COBIT 2019 is ISACA's IT governance framework. What its 40 objectives and design factors are, whether you can be certified, and how auditors use it.
What Does ENISA Do? The EU Cybersecurity Agency Explained
ENISA is the EU Agency for Cybersecurity. What it does under the Cybersecurity Act, how EU certification schemes (EUCC, EUCS) work, and its reports.
CSA CCM and STAR Explained: How Buyers Vet Cloud Providers
The Cloud Security Alliance's CCM is a cloud control framework; STAR is the registry where providers publish proof. Levels, versions and reading an entry.
PCI DSS 4.0 Requirements Explained (v4.0.1): Scope and Assessments
PCI DSS v4.0.1 in plain terms: who it applies to, the 12 requirements, the 31 March 2025 deadline, and how SAQs, ROCs and merchant levels fit together.