Compliance
DORA technical controls checklist for financial sector engineers
DORA turns ICT risk into engineering work: protection, detection, backup, incident records, testing and third party registers. A checklist by article.
Oct 18, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
DORA scoping: who is covered and what your boundary includes
Scope DORA before you build: confirm your entity type, apply proportionality, list critical functions and map every ICT third party into one register.
Oct 18, 20265 min read
Compliance
DORA evidence pack for supervisors and auditors, what to prepare
DORA applies from 17 January 2025. Here is the evidence a financial entity should have ready across risk, incidents, testing and ICT providers.
Oct 18, 20265 min read
Compliance
DORA policies and documents: the full checklist for financial entities
A checklist of the policies, plans, registers and records DORA expects, mapped to the articles that require them, with owners and review cycles.
Oct 18, 20265 min read
Compliance
DORA: the mistakes first timers make and how to avoid them
Avoid common DORA errors: treating it as an IT project, an incomplete register, weak contracts, a late incident clock and shallow resilience testing.
Oct 18, 20265 min read
Compliance
DORA after go live: the yearly cycle that keeps you compliant
DORA has recurring duties: a yearly framework review, yearly tests, a living register of information and incident reports. Use this calendar to keep up.
Oct 18, 20265 min read
Compliance
DORA in 12 weeks: an implementation calendar for ICT teams
A 12 week plan to organise DORA work across ICT risk, incidents, testing and third party registers. A template to adapt, not a promise of a finish date.
Oct 18, 20265 min read
Compliance
Cyber Essentials: technical controls checklist for an engineering team
A Cyber Essentials checklist for engineers: firewalls, configuration, updates, access control and malware protection, plus the evidence an assessor wants.
Oct 18, 20265 min read
Compliance
Can you do Cyber Essentials with spreadsheets, and when to automate?
Cyber Essentials fits in a few spreadsheets: devices, accounts, patches and the question set. Automate when the lists drift faster than you can update.
Oct 18, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.