IRDAI Guidelines on Information and Cyber Security

IRDAI Guidelines on Information and Cyber Security

The IRDAI Guidelines on Information and Cyber Security sets out a comprehensive guidelines that the insurance industry must comply with to combat escalating cyber threats. As a CERT-In Empanelled Security Auditor, Security Brigade can help customers comply with many of these requirements.

read more
RBI Cyber Security Framework for Banks

RBI Cyber Security Framework for Banks

The RBI Cyber Security Framework for Banks sets out a comprehensive list that banks must comply with to combat escalating cyber threats. As a CERT-In Empanelled Security Auditor, Security Brigade can help customers comply with many of these requirements.

read more
Code Review for PCI DSS Compliance

Code Review for PCI DSS Compliance

One of the key requirements of PCI DSS is to perform regular secure code reviews of all custom code that touches cardholder data. This helps to identify and fix security vulnerabilities in the code before it is put into production.

read more
Vulnerability Assessment vs Penetration Testing

Vulnerability Assessment vs Penetration Testing

The main difference between Vulnerability Assessment and Penetration Testing is the level of detail and the level of interaction with the network. An Vulnerability Assessment is a high-level assessment that identifies vulnerabilities, while an Penetration Testing is a low-level assessment that exploits vulnerabilities.

read more
OWASP Top 10 Web Application Security Risks

OWASP Top 10 Web Application Security Risks

The OWASP Top 10 is a standard awareness document for developers and web application security professionals. It represents a broad consensus about the most critical security risks to web applications. The document is updated every three years to reflect the changing threat landscape.

read more
Types of Red Team Assessments

Types of Red Team Assessments

Red Team Assessments can be classified into three main types: external, internal, and hybrid. External assessments focus on the organization’s external attack surface, while internal assessments focus on the internal network and systems.

read more
OWASP Mobile Top 10 Security Issues

OWASP Mobile Top 10 Security Issues

The OWASP Mobile Top 10 Project is a community-driven effort to identify and prioritize the most critical security risks to mobile applications. The project is led by a global community of security professionals dedicated to improving the security of mobile applications.

read more