17 posts in this category
CISA moves federal vulnerability management off CVSS severity and onto real-world risk with new directive. We agree with that direction, and it mirrors how we think about CVEs: severity is one dimension among several, and runtime context is what narrows the list to the vulnerabilities that matter for your specific use.
What actually changes for a security team once a runtime-driven platform meets the Cyber Resilience Act: a smaller backlog, self-generating evidence, a 24-hour reporting clock you can hit, and metrics that mean something to a board.
Where a runtime-driven security platform fits the CRA's essential requirements, vulnerability handling obligations, and reporting timeline. Annex I, Article 13, and Article 14 walked clause by clause.
An introduction to the EU Cyber Resilience Act, focused on companies that ship SaaS or containerised software into customer environments.
As NIS2 has become law in Sweden, we continue to explore the impact it will have on software engineering teams....
The EU’s NIS2 Directive is reshaping cybersecurity expectations for digital infrastructure and SaaS providers. While traditional tools overwhelm teams with...
The Cyber Resilience Act (CRA) is the EU’s new baseline for secure-by-design software and hardware. Any product with digital elements sold in the EU — from...
The EU’s NIS2 Directive is raising the bar for cybersecurity across Europe. From digital infrastructure to SaaS platforms, companies now face strict...
Are you sure that your security controls are adequate in practice, not just on paper? Every day, companies spend money on tools, policies, and processes that...
The Cyber Resilience Act (CRA) is a new EU regulation that works to improve cybersecurity by establishing standards for products with digital elements sold...
As financial services become increasingly tech-driven, the risks associated with digital systems also grow. Cyberattacks, system failures, and data breaches...
The evolution of HR Technology is transforming how organisations attract, retain, and engage talent. As workforce expectations shift and hybrid models become...
You’ve written the policies. You’ve stored the logs. But are you confident that your security controls are working in practice, or just on paper?...
Did you know the UK online gambling market generated over £15 billion in 2023? As the industry grows, so do the security challenges it faces. In the fast-paced...
From mobile transfers and electronic payments to cryptocurrency trading, the fintech industry is improving the efficiency and convenience of the financial...
The rise of RegTech is reshaping how businesses manage compliance and risk. As regulatory demands grow, more companies turn to RegTech providers to streamline...
bifrost attended the ONE Conference in the Hague last week. We participated in great discussions and presentations. Here are our key takeaways from the event...