Resources · Blog · Tag · Page 2

Compliance

Standards and audits — ISO 27001, NIST, and the evidence they need.

Tagged “Compliance”

Blog21 Apr 2026

Data Sovereignty in the Cloud: Navigating ASEAN Data Localisation Laws

As organisations increasingly adopt Kubernetes and containerised applications, DevSecOps teams face new security challenges. Containers accelerate development and deployment, but they also introduce potential blind spots. At the same time, data sovereignty and localisation laws across Southeast Asia

Zentara Team

Blog10 Apr 2026

The Shift to CNAPP: Consolidating Cloud Security for Multi-Cloud Environments

Enterprises are adopting multi-cloud environments to gain flexibility, scalability, and access to the best services from each provider. But this growth brings complexity. A 2023 Cloud Security Alliance survey found that 84 % of organisations use two or more cloud platforms, making it difficult to en

Darian Kuswanto

26 Feb 2026

Indonesia PDPD, PDPA, GDPR: A Practical Compliance Map for Regional Enterprises

For regional enterprises operating across Southeast Asia and beyond, regional data protection compliance has become increasingly complex. Organisations are no longer dealing with a single regulation in a single jurisdiction. Instead, they must navigate Indonesia’s Personal Data Protection Law, vario

Zentara Team

Cybersecurity Consulting25 Feb 2026

Security Audits vs. Security Assessments: What You Need for Compliance and What You Need for Safety

The digital landscape is defined by a paradox: organisations are more “compliant” than ever, yet sophisticated breaches continue to make headlines. This disconnect often stems from a fundamental misunderstanding of two critical pillars of defence. When leadership asks, “Are we secu

Toni Widiarto

AI in Cybersecurity20 Feb 2026

ISO 27001 Readiness Without the Pain: A Step-by-Step Implementation Plan

For many enterprises, ISO 27001 certification feels overwhelming before it even begins. There are controls to map, documents to draft, risks to assess, and audits to prepare for. Without structure, the process quickly becomes bloated, bureaucratic, and expensive. But ISO 27001 readiness does not hav

Zentara Team

Blog14 Jan 2026

How to Roll Out AI in the PMO Without Breaking Compliance

AI is Entering the PMO, Ready or Not Artificial intelligence is no longer a future concept for project management offices. It is already embedded in scheduling tools, portfolio forecasting, risk prediction, and automated reporting. For many PMOs, the pressure to adopt AI is coming from the top, driv

Adrian Soeranto

AI in Cybersecurity20 Nov 2025

What CISOs are Getting Wrong About Threat Modeling

When security teams refer to threat modeling, they often picture periodic exercises: white-board sessions, flow diagrams, lists of assets, and hypothetical attack paths. In 2026, however, this static approach is diverging sharply from how real-world adversaries operate. Attackers exploit cloud-nativ

Surya Maulana

Cloud & IT Security31 Oct 2025

How Advanced Penetration Testing Can Prevent a Major Breach

Cyberattacks today aren’t random events. They’re precision operations. Modern threat actors map digital ecosystems the way intelligence agencies map networks: systematically, quietly, and with purpose. By the time a breach happens, the reconnaissance phase has long ended. For organizations that oper

Toni Widiarto

Blog28 Oct 2025

What is Penetration Testing? A Complete Guide for Enterprises

Cyberattacks no longer rely on luck. They rely on opportunity. Every overlooked patch, misconfigured server, or untested endpoint is a potential doorway for exploitation. For modern enterprises, understanding penetration testing isn’t just an IT priority but a matter of operational survival. This gu

Toni Widiarto

SOCaaS, SOC as a Service, Security Operations Center

Blog15 Oct 2025

Managed SOC vs SOC as a Service: The Technical Divide That Defines Modern Cyber Defense

Cybersecurity today demands more than basic threat detection. It requires persistent visibility, intelligence-driven defense, and the ability to respond to threats at machine speed. Two models dominate enterprise security operations: Managed Security Operations Center (Managed SOC) and Security Oper

Marsha Widagdo

Blog26 Sept 2025

Why Vulnerability Assessment Services Are the New Business Essential

Blind spots are the new breach. In today’s threat landscape, attackers don’t wait for your team to be ready. They hunt for the cracks in your infrastructure. Every unpatched server, misconfigured application, or outdated endpoint is an open invitation. That’s why a vulnerability assessment service h

Zentara Team

Blog12 Sept 2025

SOC as a Service: The Smarter, Stronger Way to Secure Your Enterprise

Every enterprise today is digital at its core. From e-commerce to financial services, healthcare to manufacturing, businesses depend on connected systems, cloud environments, and data-driven operations to thrive. But as technology scales, so do risks—creating the need for advanced cybersecurity serv

Surya Maulana