Security and compliance articles for startups and SMEs
Practical guidance on client security reviews, ISO 27001, SOC 2 and data protection, written by the Cyficient team.
A startup's guide to answering client security questionnaires
The first questionnaire from a large client usually arrives just as a deal is getting serious. Here is how to answer it honestly, and how to use it to find the gaps that matter.
Read article →ISO 27001 or SOC 2: how to choose the right standard for your business
Both standards tell clients you take security seriously, but they are assessed differently and recognised in different markets. The right choice depends mostly on who your clients are.
Read article →What Malaysia's PDPA amendments mean for startups and SMEs
The 2024 amendments to Malaysia's Personal Data Protection Act added mandatory breach notification, data protection officers and much higher penalties. Here is what changed and what smaller businesses should have in place.
Read article →