Blog posts tagged "Compliance"

How to build DORA-ready infrastructure with verifiable provenance and reliable support

DORA requires organizations to know what they run, where it came from, and how it’s maintained. Learn how to build infrastructure with verifiable provenance.

Canonical achieves ISO 27001 certification

The certification demonstrates alignment with cybersecurity standards that will further safeguard open source products and services for use in the most...

A CISO’s guide to Application Security best practices

Effective AppSec is not a one-time fix but a continuous journey across every facet of your application’s lifecycle. By embracing a Secure Software Development...

CRA compliance: Things IoT manufacturers can no longer do under the CRA (and what to do instead)

In this blog, I’ll give you a thorough overview of common IoT manufacturer and PDE developer practices that need immediate attention, and how to change or...

The long march towards delivering CRA compliance

The EU Cyber Resilience Act is here, and in 2027 it will require manufacturers to meet a long list of security and support standards. Here’s our advice to all...

EU Cyber Resilience Act compliance: best practices for IoT manufacturers

The EU Cyber Resilience Act has considerable repercussions for the IoT device manufacturers. In this blog, we explore these new regulatory requirements and...

A CISO’s comprehensive breakdown of the EU’s Cyber Resilience Act (EU CRA)

The CRA is coming, and you need to be prepared. Depending on the Class your product falls into, there could be additional assessment, security, documentation,...

The role of FIPS 140-3 in the latest FedRAMP guidance

Good news in the US federal compliance space. The latest FedRAMP policy relaxes past restrictions that prevented organizations from applying critical security...

A comprehensive guide to NIS2 Compliance: Part 2 – Understanding NIS2 requirements

In my previous blog, we ran through what NIS2 is and who it applies to. In this second part of the series, I’ll break down the main requirements you’ll find...

Industrial cybersecurity: the journey towards IEC 62443 compliance

Industrial cybersecurity is on every CISO’s mind as manufacturers strive to integrate their IT and OT operations to drive efficiency and productivity....

6 facts for CentOS users who are holding on

Considering migrating to Ubuntu from other Linux platforms, such as CentOS? Find six useful facts to get started!

How Canonical enables PCI-DSS compliance

Anyone who deals with online payments will have heard of PCI-DSS.

Running OpenSSL 1.1.1 after EOL? Stay secure with Ubuntu Pro.

A few months ago, the OpenSSL Project announced the end of life of OpenSSL 1.1.1. It is used by thousands of software components included in Ubuntu 18.04 LTS...

FIPS certified vs compliant: what’s safer?

Minimise risk by treating the FIPS standard as a baseline, and going above and beyond the baseline to mitigate risk by applying security patches.

Enhance the security of your open-source applications and share feedback

Are you spending time on high-impact, high-value activities, or are you constantly derailed by maintenance, support, and deployment challenges? Does your...

FIPS 140-2 certification for Ubuntu 20.04 LTS!

Ubuntu, the world’s most popular operating system across private and public clouds has received the FIPS 140-2, Level 1 certification for its cryptographic...

  1. Previous page
  2. 1
  3. 2
  4. Next page