151 security guides
Practical, source-backed guides on securing real deployments: pre-launch checklists, exposed secrets, security headers, and platform-specific misconfigurations.
SOC 2 is an AICPA attestation that evaluates a service organization’s controls against the Trust Services Criteria. Learn the report types, timeline, and how to prepare for a successful audit.
Supabase holds an annual SOC 2 Type 2 audit covering security, availability, processing integrity, confidentiality, and privacy, but you must still handle data that leaves the platform.
The ISO quality - management standards are built on seven core principles: customer focus, leadership, engagement of people, process approach, improvement, evidence - based decision making, and relationship management.
ISO compliance is an internal self - assessment, while ISO certification is a third - party written assurance. This guide explains the distinction, the certification process, and how to verify certificates.
DORA is the Digital Operational Resilience Act, an EU regulation that sets mandatory ICT risk management and resilience standards for financial entities.
DORA is the EU Digital Operational Resilience Act, a regulation that forces financial institutions and their ICT providers to manage, test and report digital risks, with heavy fines for non - compliance.
DORA is the EU’s Digital Operational Resilience Act, a regulation that forces financial firms and their ICT providers to manage, test and report on ICT risk. Compliance starts on 17 January 2025 and non - compliance can cost up to 2 % of worldwide turnover.
Get the current consolidated PDF of the EU Artificial Intelligence Act, verify its authenticity, and learn how to access alternative official mirrors.
The EU AI Act was formally adopted on 13 June 2024, entered into force on 1 August 2024 and became generally applicable on 2 August 2026, making it a binding regulation across the EU.
The EU AI Act is a Regulation that creates a risk - based framework for AI across the EU, banning dangerous uses and imposing strict obligations on high - risk systems. It affects any provider or deployer whose AI reaches EU users, even from outside the bloc.
The EU AI Act creates a risk - based framework that bans the most harmful AI uses, imposes strict obligations on high - risk systems, and sets up new oversight for powerful foundation models, becoming fully enforceable on 2 August 2026.
The EU AI Act (Regulation 2024/1689) defines AI systems, sets risk - based rules, and outlines compliance dates, penalties, and transparency duties for providers and deployers in the European market.
The NIST AI Risk Management Framework’s Map function captures an AI system’s purpose, stakeholders, deployment context and impact, creating a foundation for risk measurement and mitigation.
NIST stands for the National Institute of Standards and Technology, the U.S. agency that defines measurement and cybersecurity standards. Knowing this helps you align your projects with trusted guidelines.
Learn the core NIST publications that form a practical, layered security program, how they map together, and concrete steps to start using them today.
NIST is the U.S. agency that creates the Cybersecurity Framework and a suite of standards like SP 800 - 53 that guide risk management for both government and private organizations.
Yes - the EU AI Act has extraterritorial reach and can bind U.S. AI providers, deployers, importers or distributors whenever their systems are placed on the EU market, used by an EU entity, or produce output that is used in the Union.
DORA applies to all EU - authorized financial entities and any ICT service provider that supports them, with limited exemptions for very small firms.
A DORA certification is a private - sector credential that proves you’ve completed regulated training and passed an exam, not a legal requirement but a useful proof for auditors and employers.
Free Excel checklists for the EU DORA regulation vary in size and features; the 95 - item doragrc.com workbook offers the most detail, while smaller templates suit quick assessments.
ISO compliance means following the requirements of a specific ISO standard through internal policies and procedures, without needing a third - party audit.
ISO standards are consensus - based documents that define best - practice specifications for products, processes, and services worldwide, helping organizations improve quality, safety, and trade.
ISO standards provide voluntary frameworks for quality, security, environment, and more. This guide explains the most common ISO compliance standards, their certification options, and practical steps to adopt them.
ISO 37301:2021 is the global certifiable standard for compliance management systems, applicable to any organization. This guide explains its structure, key requirements, and practical steps to achieve certification.
ISO 9001 defines a quality management system, ISO 14001 sets an environmental management system, and ISO 45001 establishes an occupational health and safety system. All three share a common structure and improvement cycle, making integrated compliance easier.
Learn the ten essential DORA requirements, from ICT risk management to incident reporting, and get concrete steps to achieve EU digital operational resilience compliance.
A practical, step - by - step checklist that shows exactly what to document, test and retain to satisfy each DORA pillar and pass supervisory review.
The Digital Operational Resilience Act (DORA) is built around five pillars that define ICT risk management, incident handling, testing, third - party oversight, and information sharing.
The EU AI Act becomes fully enforceable on 2 Aug 2026, imposing risk - based rules, transparency duties for synthetic content, and hefty fines for non - compliance.
A concise, technical summary of the EU AI Act’s scope, risk tiers, prohibited practices, high - risk obligations, and compliance timeline for developers and companies.
Free security scan
Decloak's free scan runs in about 15 seconds, no account required, and covers: