Knowledge - LOCKED STACK

KNOWLEDGE

Breaking down complexity, one article at a time. Fresh perspectives and practical ideas.

Merchant or Service Provider, Understanding Your Role Under PCI DSS

The Key Question: Merchant or Service Provider? One of the most common areas of confusion under PCI DSS is whether an organisation is classified as a merchant or a service...

An Introduction to DORA: Understanding the Digital Operational Resilience Act and Its Impact

What DORA Is Designed to Achieve Understanding how DORA applies to an organisation, how it shapes customer expectations, and what constitutes appropriate evidence and documentation is central to meeting operational...

OUR SOURCES

PCI Security Standards Council

Visit page

National Institute of Standards and Technology

Visit page

International Organization for Standardization

Visit page

SANS Internet Storm Center

Visit page

U.S. Department of Health and Human Services (HHS)

Visit page

European Data Protection Board (EDPB)

Visit page

The Center for Internet Security

Visit page

European Commission – EU Artificial Intelligence Act

Visit page

GLBA – Gramm–Leach–Bliley Act (Safeguards Rule)

Visit page

DORA – Digital Operational Resilience Act

Visit page

OWASP – Open Worldwide Application Security Project

Visit page

FIRST – Forum of Incident Response and Security Teams

Visit page