Since this blog post was published in April 2026, the PCI Key Management Operations (KMO) Standard v1.0 has been published in its final version....
PCI KMO v1.0: What You Need to Know About the New Key Management Operations Standard
read more
News
PCI Secure Software Lifecycle Standard v2.0 Released: Key Changes at a Glance
On September 28, 2026, the PCI Security Standards Council (PCI SSC) released Version 2.0 of the PCI Secure Software Lifecycle Standard. This is the...
Red Teaming: Challenge Your Security Architecture With the Final Boss
IT security is no longer just a concern for a company's IT department - it is an integral part of the entire company. However, many security...
TPRM: EBA Publishes Guidelines on Third-Party Risk Management for Non-ICT Services
The European Banking Authority (EBA) has published its final Guidelines on the management of third-party risk. The aim is to establish a consistent...
Corporate Social Responsibility: usd AG Awarded the EcoVadis Silver Medal Again in 2026
We were once again awarded the EcoVadis Silver Medal this year for our commitment to Corporate Social Responsibility (CSR). This means that we...
POS System Pentesting: Can a Checkout Become an Entry Point into the Corporate Network?
Today, POS systems are directly connected to business processes, payment services, and corporate networks. If a POS system is compromised, the...
Cyber Resilience Act: What Manufacturers of IoT and OT Products Need to Know Now
The Cyber Resilience Act (CRA) makes cybersecurity a mandatory requirement for many products with digital components for the first time. In the...
Mobile App Pentest Insights: What Developers Should Know to Build Secure Applications
Mobile frameworks such as Flutter, React Native, Cordova, and .NET MAUI promise efficient cross-platform development. A shared code base enables...
usd AG Reappointed to the PCI SSC Global Executive Assessor Roundtable
usd AG has once again been appointed to the Global Executive Assessor Roundtable (GEAR) of the PCI Security Standards Council (PCI SSC). This means...
NIS-2 Incident Reporting Obligations: Deadlines, Reporting Criteria, and Requirements
A security incident occurs: within 24 hours, your organization must determine whether it is required to notify the German Federal Office for...
usd AG Globally Re-Accredited as an Approved Scanning Vendor (ASV)
usd AG has once again successfully received worldwide accreditation as an Approved Scanning Vendor (ASV) by the PCI Security Standards Council (PCI...
Bafin to Supervise AI in the Financial Sector: What Organizations Need to Know
Bafin has been assigned new authority to oversee AI systems in the financial sector. The legal basis is Germany’s AI Act Implementation Act, which...