Choose the channel you trust
Field-tested thinking on the certification, risk and compliance challenges our clients face.
A practical walkthrough of a GSMA SAS audit day — who attends, what auditors examine first, and the evidence gaps that most often become findings.
How cardholder-data environments in Kenya should scope PCI DSS, what drives cost, and how to combine PCI with ISO 27001 without duplicating effort.
The 2022 revision consolidates Annex A controls and introduces new attributes. Here is how to plan a defensible transition without disrupting your operations.
Boards are asking for quantified, comparable and decision-useful cyber risk reporting. We outline a practical model that works in mid-market organisations.
The ODPC has issued a growing number of enforcement decisions. Here is what compliance leaders should be prioritising in 2026.
First-time SAS-UP and SAS-SM applicants consistently underestimate the physical and personnel control requirements. This practical guide walks through the scheme, the timeline, the evidence and the findings we see most often.
Organisations running three or more standards routinely duplicate effort. Integration reduces audit fatigue and unlocks measurable efficiency.
Third parties now underpin most customer-facing services. A structured maturity model helps banks focus assurance where it matters.
