Compliance
Why should CFOs take part in cybersecurity oversight?
Cyber risk is a financial risk with disclosure duties, insurance terms and budget trade-offs. Here is what a CFO should ask for, using NIST CSF 2.0 Govern.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
CERT-In directions of April 2022: what evidence do you need?
A checklist of the evidence the CERT-In directions imply: synchronized clocks, six-hour incident reporting, a point of contact, 180 days of logs in India.
Oct 18, 20264 min read
Compliance
What do the CERT-In directions of 2022 require, in plain language?
Six hour incident reports, 180 day logs kept in India, synced clocks and a named contact, plus extra duties for cloud and VPN providers. What to check.
Oct 18, 20264 min read
Compliance
CCPA for a product manager: rights, notices and what to build
CCPA gives Californians rights to know, delete, correct, opt out and limit. A product manager decides how requests, notices and opt-out signals work.
Oct 18, 20264 min read
Compliance
CCPA runbook for DevOps: deletes, opt-outs and log retention
A DevOps view of CCPA: where personal data hides in logs, backups and test environments, and how to make delete and opt-out requests repeatable.
Oct 18, 20264 min read
Compliance
CCPA for VPs of engineering: thresholds, requests and data maps
The CCPA covers businesses by revenue, data volume or data-sale income. A VP of engineering must make access, deletion and opt-out requests answerable.
Oct 18, 20264 min read
Compliance
CCPA for CTOs: which engineering decisions it forces
The CCPA gives California consumers rights over their data. A CTO must decide where data lives, who can delete it and how opt-out signals reach systems.
Oct 18, 20265 min read
Compliance
What does Canada's PIPEDA require of a software company?
PIPEDA rests on ten fair information principles plus an appropriate-purposes test. Each one in plain language, and what engineers should be able to show.
Oct 18, 20264 min read
Compliance
Business continuity for healthcare: what does HIPAA expect?
HIPAA's Security Rule requires backups, disaster recovery and an emergency mode plan for ePHI. Here is how to turn those into a plan you can test.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.