Resources · Blog

Blog.

Your blog category

Articles in “Blog”

Blog31 Jul 2026

OJK Cyber Resilience Rules for Digital Banks in Indonesia 2026

Indonesia now has 17 licensed digital banks, more than any other country in Southeast Asia. Digital banking penetration has grown alongside them, from 31% of the population in 2022 to a projected 39%, roughly 75 million people, by 2026. Operating a digital bank Indonesia service places an institution.

Francesco Catozzo

Blog28 Jul 2026

Cybersecurity Audit Checklist: Free Template and Best Practices

Most security gaps aren’t sophisticated. They’re a dormant admin account, an unpatched server, a backup nobody has tested since it was configured. Each one is boring on its own, and each one is how attackers get in. A cybersecurity audit checklist gives you a repeatable way to find those

Francesco Catozzo

Blog27 Jul 2026

What Is a Cybersecurity Audit? Types, Process, and Checklist

Most breaches don’t announce themselves. They start quietly, in a system nobody checked: an open port left over from a migration, a contractor account that was never disabled, a backup that hasn’t been tested since it was set up. A cybersecurity audit is how you find these before someone

Francesco Catozzo

Blog24 Jul 2026

What Is Ransomware? How It Works and How to Prevent It

Most guides describe ransomware as software that locks your files until you pay. That description is a decade out of date, and believing it is exactly what gets businesses caught. Modern ransomware doesn’t just lock your data. It steals it first, then encrypts what’s left, then threatens

Surya Maulana

Blog20 Jul 2026

What Is Social Engineering? Types and Real-World Attacks

Most cyberattacks don’t start with code. They start with a conversation. An attacker doesn’t need to break your firewall if they can convince someone to open the door. That’s social engineering: manipulating people into handing over access, information, or money. It skips the techn

Zentara Team

Blog16 Jul 2026

Data Protection Impact Assessment (DPIA)

Many organisations treat a Data Protection Impact Assessment (DPIA) as a compliance document. Regulators increasingly see it differently. A DPIA is only valuable if the risks it identifies are actually addressed. In January 2026, France’s data protection regulator (CNIL) fined France Travail E

Francesco Catozzo

Blog16 Jul 2026

Data Breach Response: A Guide for Businesses

Most organisations do not fail at data breach response because they lack a plan. They fail because the clock had already been running for weeks before anyone noticed. Notification deadlines start when you become aware of a breach. That single word governs everything that follows. An organisation tha

Zentara Team

Blog15 Jul 2026

ISO/IEC 27701 Privacy Information Management System (PIMS)

Most of the guidance you will find on privacy information management systems is out of date. It tells you that a PIMS is an extension of ISO 27001, and that you need an ISO 27001 certificate before you can certify one. Several certification bodies still publish this on their websites today. It stopp

Francesco Catozzo

Blog15 Jul 2026

What Is a Managed SOC? Services, Benefits, and How to Choose

Running security around the clock is harder than most organisations expect. Threats don’t keep office hours, alerts pile up by the thousand, and the skilled people needed to make sense of it all are scarce and expensive. A Managed SOC is how many organisations solve that problem without buildi

Marsha Widagdo

Blog13 Jul 2026

MAS TRM and the Quantum Threat, Why Financial Institutions Must Act Now

Most cybersecurity threats demand action because something is happening today. The quantum threat is different. It asks financial institutions to act now against a danger that fully arrives years from now, because the damage is already being set in motion. Attackers don’t need a working quantu

Zentara Team

Blog10 Jul 2026

Cloud Security Under Singapore’s New Cross-Border Rules

For years, a quiet assumption shaped how companies thought about cloud security and the law. If a system lived on a server in another country, it sat outside Singapore’s reach. Move your workloads to an overseas data centre, and you move them beyond the regulator’s grasp. That assumption

Zentara Team

Blog09 Jul 2026

Third-Party Risk Management Under Singapore’s Cybersecurity Act

For years, managing the risk from your vendors was good practice. A responsible company checked its suppliers, asked the right questions, and slept a little easier. In Singapore, that’s no longer just good practice. For organisations running essential services, it’s now the law, with rea

Zentara Team