mobile-logo
 

Cyber Security Blog

BSI IT-Grundschutz
23 Jan

What is BSI IT-grundschutz? Requirements and implementation guide

by CyberArrow team
in BSI IT-Grundschutz, Cyber Security Governance, Risk and, Compliance
Comments

Information security is no longer optional for organizations operating in Germany and across Europe. Regulators, customers, and partners expect strong protection of data, systems, and operations. One of the most trusted frameworks used to meet these expectations is BSI IT-grundschutz.   BSI IT-grundschutz offers a structured and practical approach to building information security across an organization. It is widely adopted by public sector bodies, regulated industries, and...

Read More
web application firewall
23 Jan

What is web security? Risks, controls, and compliance considerations

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance
Comments

Web security is critical for any organization that delivers applications, APIs, or online services. As technology evolves, so do the cyber threats targeting web apps and the data they handle. A breach in a web application can expose sensitive customer information, disrupt business operations, and lead to regulatory penalties.   In 2026 and beyond, web security requires a structured approach that combines robust risk controls, continuous monitoring,...

Read More
AWS shared responsibility model
20 Jan

AWS shared responsibility model: What it means for security and compliance

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance
Comments

Cloud adoption continues to grow as organizations seek agility, scale, and cost efficiency. Amazon Web Services (AWS) is one of the most widely used cloud platforms, hosting critical workloads and sensitive data. But moving to the cloud does not eliminate security or compliance responsibilities; it changes who is accountable for what. That’s why the AWS shared responsibility model exists.   Understanding this model is essential for security...

Read More
Key benefits of automating ISO 27001 compliance vector illustration
20 Jan

ISO 27001 supplier security policy template: How to write it and what to include

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, ISO 27001
Comments

Modern companies rely on outside suppliers more than ever. They use suppliers for cloud services, IT operations, payments, logistics, storage, marketing, legal, finance, and support. This gives speed and flexibility. It also brings new risks. A weak supplier can expose sensitive data and damage trust. This is why ISO 27001 focuses strongly on supplier security. A proper ISO 27001 supplier security policy helps reduce these...

Read More
Cloud security compliance
16 Jan

Cloud workload protection (CWP) strategies organizations need in 2026

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance
Comments

Cloud workloads have become the foundation of modern enterprise operations. From SaaS applications to IaaS servers, PaaS platforms, and containerized environments, these workloads handle critical business data and processes. Protecting them is no longer just a technical task but a strategic, risk- and compliance-driven priority.   In 2026, organizations are expected not only to secure workloads against attacks but also to demonstrate continuous monitoring, evidence collection, and...

Read More
GRC Risk Management Software
15 Jan

ISO 27001 risk treatment plan template: How to write it and what to include

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, ISO 27001
Comments

ISO 27001 is the global standard for information security. One of the most important parts of the standard is risk management. During ISO 27001 implementation, organizations identify information security risks and then decide how to treat them. The output of this process is called the risk treatment plan.   A risk treatment plan explains how the organization will reduce, avoid, transfer, or accept risks. It includes details...

Read More