HIPAA Penetration Testing Checklist
In the healthcare sector, data security is paramount. Patient information must be safeguarded at all costs. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal legislation applicable to American citizens and healthcare organisations. It sets the standard for protecting the privacy and security of sensitive patient data. Any organisation within or […]
Preparing for DORA: How Threat-Led Penetration Testing (Red Teaming) Can Enhance Your Digital Resilience
As the financial sector becomes increasingly digitised, the risks associated with cyber threats and operational disruptions are growing. To address these challenges, the European Union has introduced the Digital Operational Resilience Act (DORA), a comprehensive regulation designed to ensure that financial institutions can withstand and recover from all types of digital disruptions. One key aspect […]
PCI DSS 4 Requirements for Code and Payment Pages
As we help our customers with transitioning to PCI DSS 4, some immediate and future dated requirements are standing out for special attention, specifically: 6 – Code repositories used for custom code and configuration information 4.3 – Authorization of payment page scripts 6.1 – Change and tamper detection for payment pages, including scripts Code Repositories […]