Users of the SWIFT network are required to demonstrate compliance with the mandatory security controls through an annual independent audit in...
Financial Sector & Compliance
Information Security in Third-Party Risk Management: How to Monitor Your TPRM Program
Companies often work with a large number of service providers in order to be able to concentrate on their core business or save costs. For this to...
Information Security in the Financial Sector: How Frankfurter Sparkasse is Tackling the Mammoth Task
The digital transformation in the financial sector has created new areas of attack for cyber criminals and therefore significant risks for...
DORA Deep Dive: Threat-Led Penetration Testing (TLPT)
The Digital Operational Resilience Act (DORA) will apply as of January 17, 2025. In addition to routine operational resilience testing, DORA will...
Information Security in Third-Party Risk Management: How to Set Up a TPRM Program
Companies often work with a large number of service providers in order to be able to concentrate on their core business or save costs. For this to...
Cloud Revolution in Regulated Industries: Opportunities, Challenges and Risks
As in all regulated industries, banks, insurance companies and capital management companies are undergoing a transformation through the increasing...
Setting off for DORA – Your Preparation in 3 Steps
DORA, the Digital Operational Resilience Act, is currently keeping the entire European financial sector on tenterhooks. The European Commission's...
Information Security in Third Party Risk Management: The Basics
Companies often work with a large number of service providers in order to be able to concentrate on their core business or save costs. For this to...
SWIFT Expert Tip: Combine Your Current SWIFT Assessment with a Gap-Analysis for CSCFv2024
SWIFT users are required by the Customer Security Controls Framework (CSCF) to demonstrate compliance with at least all mandatory controls through...
IT-GRC Congress 2023: usd Experts to Give Presentations
On November 7 and 8, 2023, ISACA Germany Chapter and dpunkt.verlag GmbH will host the IT-GRC Congress in Munich. Once again, the agenda of the...
Are You Ready for DORA? If Not, Here’s 5 Tips on What to Consider during Planning
The Digital Operational Resilience Act (DORA) is a regulatory framework that aims to ensure the operational resilience of financial institutions in...
NIS-2 and DORA: Why Two Pieces of EU Cybersecurity Legislation?
Within a few months, the European Union has published two important pieces of legislation to strengthen cybersecurity: NIS-2 and DORA. Both are...









