Merqab intelligence
Featured
Explore Saudi Arabia’s Critical Systems Cybersecurity Controls (CSCC–1:2019), a national mandate by the NCA designed to safeguard critical infrastructure through advanced, risk-based cybersecurity requirements aligned with Vision 2030.
July 2025 · 9 min read
Discover how the Saudi Cybersecurity Workforce Framework (SCyWF) is shaping the Kingdom’s cybersecurity landscape by defining clear roles, skill requirements, and structured pathways to build a resilient, future-ready cybersecurity workforce aligned with Vision 2030.
July 2025 · 10 min read
Learn about Saudi Arabia’s NCA Essential Cybersecurity Controls (ECC), a structured framework helping organizations strengthen cybersecurity, ensure compliance, and manage cyber risks effectively.
June 2025 · 7 min read
Discover how the SAMA Cybersecurity Framework influences Third-Party Risk Management (TPRM) in Saudi Arabia, with insights into mandatory controls, vendor compliance, and maturity level requirements for financial institutions.
June 2025 · 6 min read
Explore how NIST CSF 2.0 reshapes third-party risk management with new governance, supply chain controls, and maturity tiers for cybersecurity resilience.
June 2025 · 4 min read
Discover how AI-powered gap analysis transforms third-party risk management, identifying compliance gaps quickly and efficiently for smarter decisions.
May 2025 · 5 min read
Learn how banks can strengthen cybersecurity, comply with regulations, and mitigate vendor risks with proven third-party cyber risk best practices.
May 2025 · 5 min read
Explore why AI is essential in third-party risk management and how Genesis Platform is pioneering the future of smart, automated TPRM.
April 2025 · 5 min read
Step-by-step guide to building a NIS2‑ready third-party risk program: meet EU cybersecurity mandates and secure your vendor ecosystem.
April 2025 · 5 min read
Navigate third-party risk using FFIEC guidelines: learn practical steps to assess vendors, comply with US banking regulations, and reduce risk.
April 2025 · 6 min read
The Payment Card Industry Data Security Standard (PCI DSS) is a globally recognized set of controls and testing procedures developed by the PCI Security Standards Council (PCI SSC) to protect cardholder data.
April 2025 · 6 min read
Explore the differences between HITRUST and SOC 2 compliance frameworks to select the best fit for your organization.
March 2025 · 5 min read
Discover what HITRUST certification entails and how it enhances vendor oversight and mitigates third‑party cybersecurity risks.
February 2025 · 5 min read
Get up to speed on PCI DSS compliance, understand new v4.0 requirements and their implications for vendor data protection and merchant risk.
January 2025 · 5 min read
A primer on third‑party cyber risk: why it matters, core components, and how to build a resilient TPRM framework for secure outsourcing.
December 2024 · 2 min read
Review the Insomniac Games breach: exposed data, attack methods, and how third-party vendors and access controls played a role.
November 2024 · 5 min read
Learn best practices for third‑party risk in energy: address operational, cyber, ESG, and compliance risks across complex supply chains.
September 2024 · 3 min read
Explore aviation TPRM essentials: manage vendor security, operations, and compliance to reduce disruptions and safety incidents.
September 2024 · 4 min read
Discover the EU’s Digital Operational Resilience Act: ICT risk rules, incident reporting duties, and third-party oversight for financial firms.
August 2024 · 4 min read
Stay compliant with SEBI's latest TPRM updates: understand new requirements, timelines, and how to align your vendor risk frameworks.
August 2024 · 5 min read
Explore the key differences between SIEM and IDS—understand their roles, deployment ease, and how to choose the right tool for cybersecurity.
August 2024 · 6 min read
Learn the TPRM lifecycle: from risk identification and due diligence to continuous monitoring and risk remediation in third-party management.
July 2024 · 6 min read
Explore TPRM in healthcare: manage vendor compliance, data security, and patient safety through structured risk assessments and audits.
July 2024 · 6 min read
Implement TPRM in banking & finance: assess vendor risk, meet compliance mandates, and safeguard transactions and customer data.
June 2024 · 11 min read
Small business cybersecurity & compliance 101: learn essential controls, vendor vetting, and scalable ways to reduce risk on a budget.
June 2024 · 7 min read
Assess vendor risk by relationship type: learn when to apply basic checks vs. in-depth audits based on access, data and service criticality.
June 2024 · 4 min read
Complete guide to TPRM in 2024: understand frameworks, industry best practices, compliance drivers, and vendor risk strategies.
February 2024 · 2 min read
Dive into the Prudential breach: how it happened, affected stakeholders, and what TPRM and cybersecurity lessons organizations should not miss.
February 2024 · 2 min read
Analyze the 23andMe breach: what data was exposed, breach timeline, and how to mitigate genetic vendor risks in supply chains.
January 2024 · 2 min read
Explore the Orrick law firm data breach: root causes, impact on client confidentiality, and third-party oversight imperatives.
January 2024 · 2 min read
Analyzing UnitedHealth’s $22M ransomware payout: lessons learned, breach response strategies, and improving vendor cybersecurity resilience.
October 2023 · 2 min read
Get an in-depth look at PCI DSS compliance: its core requirements, updates, and critical guidance for protecting payment data across your vendor ecosystem.
May 2023 · 2 min read
Learn about FISMA compliance: federal cybersecurity requirements, agency responsibilities, and how organizations must secure information systems.
April 2023 · 2 min read
Understand HIPAA compliance essentials: how to protect health data, enforce privacy rules, audit vendors, and avoid steep penalties.
April 2023 · 2 min read
Explore Business Email Compromise (BEC): how attackers trick employees, the financial impact, and tactics to defend against email fraud.
April 2023 · 2 min read
Discover cyber risk quantification: use data-driven models to measure financial impact, prioritize controls, and make informed security investments.
April 2023 · 2 min read
Learn about Shadow IT: hidden apps and devices in your environment—why they introduce risk and how to discover and manage them effectively.
February 2023 · 2 min read
Understand DNS hijacking: how attackers redirect your traffic, the consequences, and protective steps like DNSSEC to prevent tampering.
February 2023 · 2 min read
Explore Zero Trust security: never trust internal or external actors, enforce authentication per session, and reduce risk across your network.
January 2023 · 1 min read
Understand spear phishing: targeted email-based social engineering—learn how attackers operate and how to detect and prevent these threats.
January 2023 · 2 min read
Learn about Ransomware‑as‑a‑Service: how affiliates rent malware, its risks to businesses, and essential prevention tactics.
December 2022 · 2 min read
Explore cyber resilience: bounce back from attacks, build adaptive defenses, and ensure continuity in the face of threats.
December 2022 · 2 min read
Discover top cyber and operational threats in banking/finance—from fraud to ransomware—and how firms are mitigating risk.
December 2022 · 2 min read
Comprehensive guide to penetration testing: phases, methodologies, tools, and how to use pen tests to strengthen your security.
November 2022 · 2 min read
Analyze the Medibank breach: sensitive health data exposed, response steps, and key takeaways for vendor cybersecurity practices.
November 2022 · 2 min read
Learn the CIS Control Framework: 18 essential security practices, from asset management to incident response, for strong defenses.
November 2022 · 2 min read
Understand DNSSEC: how it secures DNS lookups, prevents cache poisoning, and why it’s essential for domain integrity.
November 2022 · 2 min read
Discover known vulnerabilities in OpenSSL 3: their impact, patch recommendations, and best practices to secure cryptographic libraries.
November 2022 · 1 min read
Master patch management: streamline updates, close vulnerabilities, and build vendor processes with automated patching programs.
October 2022 · 2 min read
Explore MITRE ATT&CK: the adversary tactics and techniques matrix used to enhance detection, threat modeling, and defence strategies.
October 2022 · 1 min read
Get a primer on SIG questionnaires: standardized security assessments that streamline vendor audits and due diligence.
October 2022 · 1 min read
Discover how DNS cache poisoning manipulates DNS responses, its risks, and how DNSSEC and validation guard against these attacks.
October 2022 · 1 min read
Understand DMARC records: email authentication, how they prevent spoofing, and why enforcing DMARC protects brand and recipients.
October 2022 · 2 min read
The General Data Protection Regulation (GDPR) is an EU law that came into effect on May 25th, aiming to protect personal data and regulate how organizations handle information.
September 2022 · 2 min read
Coverage of the Lapsus$ hack on Okta: how the breach happened, risks from compromised MFA tokens, and mitigation strategies.
September 2022 · 2 min read
Learn about the leak of 10,000 Okta credentials, its impact on enterprise access, and how to harden identity systems post-incident.
September 2022 · 2 min read
Learn about Uber’s 2022 security breach by a teen hacker: stolen data, exploited systems, and how to strengthen identity and access controls.
July 2022 · 2 min read
Learn how DNS works like the internet’s phonebook—translating domain names to IPs, caching responses, and enabling web browsing at scale.
June 2022 · 1 min read
Explore Genesis Platform’s third-party risk management features: AI‑powered assessments, compliance monitoring, and vendor oversight.
June 2022 · 2 min read
Learn attack surface management: discover external digital threats, prioritize asset protection, and continuously monitor exposures.
June 2022 · 2 min read
Complete guide to TPRM: understand its framework, why it matters, and how to manage vendor risks across cyber, compliance, and operational domains.
June 2022 · 2 min read
Learn the NIST Cybersecurity Framework: explore the five core functions—Identify, Protect, Detect, Respond, Recover—for cyber resilience.
