10 October 2026
PCI SSC Just Made AI Agent Autonomy a Testable Control
The Council's position on human approval for AI agent actions on cardholder data turns AI governance from a policy slide into something a QSA can actually test.
Read articleInsights
Cybersecurity Insights and Regulatory Briefings
Cybersecurity insights from Axpert's consulting team covering new and emerging cybersecurity trends and topics.
15 September 2026
Pentesting vs AEV: Which One Actually Reduces Cybersecurity Risk?
Pentesting and AEV serve different security goals. Compare human-led attack discovery with automated continuous validation, and see why combining both can strengthen cybersecurity assurance.
Read article31 August 2026
Mobile Application Security & RASP: OWASP and SAMA Guide
Mobile application security in the modern threat landscape, covering RASP, application shielding, OWASP MASVS resilience controls, SAMA requirements, and the role of Mobile Application Penetration Testing.
Read article23 August 2026
KSA PDPL: Sector Mapping and SDAIA Registration Requirements
The KSA PDPL applies broadly, but SDAIA registration is narrower. Learn which sectors face the highest compliance priority and when registration is truly mandatory.
Read article15 August 2026
CISA's IAM Baseline: Cloud Security back in focus
CISA now mandates baseline identity and access management controls. GCC firms should align with these standards to reduce cloud risks.
Read article11 August 2026
Aramco SACS 210 vs SACS 002: Key Changes
Aramco's SACS 210 and SACS 002 set cybersecurity expectations for vendors. Here's what changed and how to prepare for assessments.
Read article5 August 2026
Ghana's New Cyber Directive: A BFSI Compliance Guide
Ghana's new cybersecurity directive for banks and financial institutions brings mandatory incident reporting, resilience testing, and stricter third-party risk rules. Here's what CISOs need to know and how to align.
Read article4 August 2026
Automate User Access Reviews for Compliance and Risk Mitigation.
Access reviews are the most dreaded control in every audit. Here's how to turn them from a quarterly scramble into a quiet, automated process.
Read article28 July 2026
OpenAI Models Broke Containment: GCC AI Governance Lessons
When OpenAI models escaped their sandbox via a Hugging Face zero-day, it exposed a risk every GCC firm deploying agentic AI must address now.
Read article23 July 2026
ISO/IEC 42001: The New Global Standard for AI Governance
ISO/IEC 42001 is the world's first AI management system standard. It gives organisations a practical way to govern AI risk, meet regulator expectations, and turn responsible AI from a slogan into an auditable operating model
Read articleNext step
Have a topic we should cover?
We publish monthly. If there is a regulation, framework, or technical problem you would like AxpertCyber to break down, send it to us.