The Savadub Journal

Learn how ISO/IEC 27018 extends cloud security with privacy controls for personally identifiable information (PII) in public clouds — and why it matters for GDPR compliance and enterprise trust.

Everything covered entities and business associates need to know about HIPAA compliance — the Privacy Rule, Security Rule, Breach Notification Rule, risk analysis requirements, technical safeguards, and how to build a sustainable HIPAA compliance program.

A deep dive into the NIST Risk Management Framework — the seven steps from categorisation to monitoring, how it connects to NIST SP 800-53, and how organisations use it to achieve and maintain ATO for federal systems.

Everything Nigerian organisations and international businesses processing Nigerian personal data need to know about NDPR compliance — NITDA registration, lawful basis, data subject rights, audit requirements, and building a sustainable data governance framework.

A complete guide to OWASP SAMM (Software Assurance Maturity Model) — the five business functions, fifteen security practices, maturity levels, and how to use SAMM assessments to build a roadmap for software security improvement.

A complete guide to Qatar's Law No. 13 of 2016 on Personal Data Privacy Protection — what it covers, key requirements, the role of the Ministry of Communications, and how to build a compliant data protection program for Qatar operations.

A complete guide to SOC 2 Type I — what it is, what it covers, who needs it, the step-by-step readiness journey, what auditors look for, and how to achieve attestation without derailing your engineering team.

A complete guide to OWASP Top 10 2021 — what each vulnerability is, real-world exploitation examples, how to detect it, and how to remediate and build lasting defences into your development lifecycle.

A practical guide to DevSecOps — how to integrate security tooling, processes, and culture into your CI/CD pipeline, infrastructure as code, and release process to build security at speed.

Everything organisations need to know about Saudi Arabia's Personal Data Protection Law — key requirements, the SDAIA regulator, processing rules, cross-border transfer restrictions, and building a compliant data governance program.