mobile-logo
 

Cyber Security Blog

FedRAMP illustration
30 Jan

What changes do the FedRAMP RFCs propose for FedRAMP 20x?

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, FedRAMP
Comments

FedRAMP 20x in 2026 continues to modernize federal cloud authorizations, moving beyond traditional Rev5 controls toward automation, continuous monitoring, and machine-readable compliance data. A critical step in that evolution is the series of FedRAMP RFCs issued for public comment, proposals that suggest how policies, processes, and compliance expectations might change before final adoption.    Understanding these RFCs helps organizations anticipate shifts in cloud authorization, evidence requirements, and...

Read More
BDSG Federal Data Protection Act
29 Jan

What is BDSG (Federal Data Protection Act)? A detailed guide

by CyberArrow team
in BDSG (Federal Data Protection Act), Cyber Security Governance, Risk and, Compliance
Comments

Data protection is a legal and ethical responsibility for organizations operating in Germany. Personal data is collected, stored, and processed every day through digital systems, applications, and business processes. To protect individuals and regulate how organizations handle personal data, Germany enforces the BDSG, also known as the Federal Data Protection Act. The BDSG works alongside the General Data Protection Regulation and adds national rules that apply...

Read More
FedRAMP illustration
27 Jan

FedRAMP 20x in 2026: What’s changed and what cloud providers should prepare for

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, FedRAMP
Comments

FedRAMP 20x is no longer just a modernization proposal. As the program moves through 2026, it is actively reshaping how federal cloud authorizations are designed, assessed, and maintained.   What began as an effort to streamline FedRAMP has evolved into a broader shift toward automation, machine-readable compliance, and continuous security visibility. Phase 2 Moderate pilots are now testing these ideas in real-world environments, while policy updates and...

Read More
BSI IT-Grundschutz
23 Jan

IT Security Act 2.0 (IT-Sicherheitsgesetz 2.0): A complete guide

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance, IT-Sicherheitsgesetz 2.0
Comments

Cyber security is now a national priority in Germany. As digital systems grow more connected, the impact of cyber incidents has become more severe. Attacks on energy providers, hospitals, transport systems, and digital platforms can disrupt daily life and economic stability. To address these risks, Germany introduced IT-Sicherheitsgesetz 2.0, also known as the IT Security Act 2.0.   This law strengthens cyber security obligations for critical sectors...

Read More
BSI IT-Grundschutz
23 Jan

What is BSI IT-grundschutz? Requirements and implementation guide

by CyberArrow team
in BSI IT-Grundschutz, Cyber Security Governance, Risk and, Compliance
Comments

Information security is no longer optional for organizations operating in Germany and across Europe. Regulators, customers, and partners expect strong protection of data, systems, and operations. One of the most trusted frameworks used to meet these expectations is BSI IT-grundschutz.   BSI IT-grundschutz offers a structured and practical approach to building information security across an organization. It is widely adopted by public sector bodies, regulated industries, and...

Read More
web application firewall
23 Jan

What is web security? Risks, controls, and compliance considerations

by CyberArrow team
in Cyber Security Governance, Risk and, Compliance
Comments

Web security is critical for any organization that delivers applications, APIs, or online services. As technology evolves, so do the cyber threats targeting web apps and the data they handle. A breach in a web application can expose sensitive customer information, disrupt business operations, and lead to regulatory penalties.   In 2026 and beyond, web security requires a structured approach that combines robust risk controls, continuous monitoring,...

Read More