Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Australia's 2025 Protective Security Policy Framework (PSPF) Now Mandates Zero Trust - What You Need to Know and Do

Australia’s updated Protective Security Policy Framework (PSPF) now mandates the adoption of Zero Trust principles. Australia’s Protective Security Policy Framework (PSPF) Annual Release 2025 now formally mandates the adoption of zero trust principles to improve cybersecurity posture. Government organisations must now align their cybersecurity strategies with the Information Security Manual and the Guiding Principles to Embed a Zero Trust Culture.

Beyond PCI and HIPAA: How Feroot Powers Australian Privacy Act (APA) Compliance

Yes—if your website collects data from individuals located in Australia, the Australian Privacy Act (APA) may apply, even if your company is not based there. This law is enforced by the Office of the Australian Information Commissioner (OAIC) and governs how “APP entities” handle personal information—including that collected by websites, apps, scripts, and third-party services.

Japan's Active Cyberdefense Law: A New Era in Cybersecurity Strategy

On May 16th, 2025, the Japanese Parliament enacted a landmark piece of cybersecurity legislation: the Japan Active Cyberdefense Law. It was a historic moment for the country's digital defense, empowering law enforcement and military agencies to conduct pre-emptive cyber operations before they materialize.

DORA Compliance: What It Means for Global Institutions

As cyber threats grow in complexity and financial systems become increasingly reliant on interconnected digital infrastructure, the European Union’s Digital Operational Resilience Act (DORA) is redefining the technical and governance requirements for how financial entities and their Information and Communication Technology (ICT) service providers manage, withstand, and recover from operational disruptions.

GDPR, CCPA, and ISO 27701: Harmonizing global data privacy compliance

In this article Data has become one of the most valuable assets for organizations. The increased flow of personal information across borders has compelled regulatory bodies and industry standards to introduce robust data privacy frameworks. Three prominent instruments that have emerged on the global stage are the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the International Organization for Standardization’s ISO 27701 standard.

GENIUS Is Law: What It Means for Regulated Financial Institutions

With the enactment of the GENIUS Act (Guiding and Establishing National Innovation for U.S. Stablecoins of 2025), the federal government has, for the first time, created a comprehensive legal and regulatory framework governing the issuance and operation of payment stablecoins. GENIUS introduces a national regulatory floor for licensing stablecoin issuers and sets standards for both domestic and foreign participants.

Why Most Businesses Fail at GDPR & How you can win

60% of companies think they’re GDPR-compliant… but they’re not. And when the audits or complaints hit, it’s already too late. The average GDPR fine so far has exceeded €1.5 million for large corporations, with smaller businesses also facing substantial penalties. Nearly 70% of companies lack a comprehensive data inventory, leaving them vulnerable. Only 50% of organizations have a formal breach response plan in place.

Ensuring Compliance with DORA: How Trustwave Secures Your Databases and Meets Regulatory Standards

The EU’s Digital Operational Resilience Act (DORA) establishes a unified regulatory framework to ensure financial institutions can withstand and recover from IT disruptions. As a cornerstone of operational resilience, secure and compliant database environments are critical to safeguarding sensitive financial data and maintaining regulatory alignment.

Navigating DORA: Key Considerations for the Financial Sector

It is no secret that the financial industry is a serious target for cyber criminals, driving the need for more stringent regulations to help protect these institutions and their employee and customer data. Recent research undertaken by Security Scorecard indicates that in 2023, 78% of European financial institutions experienced a data breach involving a third party. Also, 84% of financial organisations have been affected by a breach involving a fourth party.