VARA: Dubai’s Virtual Assets Regulatory Authority
22/09/2026

VARA: Dubai’s Virtual Assets Regulatory Authority

A board-level briefing on Dubai’s VARA regime, covering licensing, AML/CFT controls,enforcement actions and the compliance gaps that ISO 27001,

The CyAN Blog
-
by Kamran (Kim) Mirza
Pakistan’s New Compliance Stack: A CISO Advisory Perspective for Financial Institutions
25/08/2026

Pakistan’s New Compliance Stack: A CISO Advisory Perspective for Financial Institutions

Pakistan’s financial sector is absorbing five regulatory regimes at once, Cyber Shield, PISF 2026, PVARA, the Pakistan Digital Authority, and emerging data protection law, mapped with diagrams, comparison tables, and a 180-day action plan by an advisor with 20+ years of GCC Central Bank experience.

The CyAN Blog
-
by Cyan Staff
Stablecoin and Crypto Asset Wallet Types: Custody and Security Requirements
13/08/2026

Stablecoin and Crypto Asset Wallet Types: Custody and Security Requirements

Wallet architecture and key custody are now the highest-stakes control domain in digital assets. This paper maps the five wallet classes, four custody models, and governance requirements under PCI DSS, ISO/IEC 27001, ISO/IEC 42001, NIST CSF, and the EU AI Act.

The CyAN Blog
-
by Cyan Staff
Applications now closed for CyAN’s Mentorship Programme, Autumn 2026
04/08/2026

Applications now closed for CyAN’s Mentorship Programme, Autumn 2026

Note: applications are now closed CyAN’s mentorship programme is back for its autumn 2026 cohort, running from mid-September to mid-December. The programme is free and volunteer-led. It pairs people building a career in cybersecurity, or a related field, with experienced CyAN members for three months …

The CyAN Blog
-
by Cyan Staff
CyAN Signs Protect.ngo / ICSC Call to Protect Civil Society Organisations
04/08/2026

CyAN Signs Protect.ngo / ICSC Call to Protect Civil Society Organisations

CyAN supports the call to strengthen organisations protecting societal resilience.

The CyAN Blog
-
by John Salomon
Governing Security When the CISO Advises but Doesn’t Command – by Kamran Israr Mirza (Kim)
27/07/2026

Governing Security When the CISO Advises but Doesn’t Command – by Kamran Israr Mirza (Kim)

When the SOC reports to the CTO and the CISO’s role is advisory only, accountability and authority quietly split apart; this white paper makes the case for elevating the CISO’s reporting line to the CEO or Board and giving the function its own budget.

The CyAN Blog
-
by Cyan Staff
Australia’s Horizon Cyber Security Initiative: What it Means for Industry – by David Gaul
22/07/2026

Australia’s Horizon Cyber Security Initiative: What it Means for Industry – by David Gaul

Few people ask about the implications of Australia’s cyber security reform on businesses – this paper addresses important aspects of the initiative.

The CyAN Blog
-
by Cyan Staff
Cyber Risk Is in the Boardroom. Are Boards Ready to Govern It? – By Sanchay Joshi
21/07/2026

Cyber Risk Is in the Boardroom. Are Boards Ready to Govern It? – By Sanchay Joshi

Sanchay Joshi explores improved approaches for boards to ensure oversight of cybersecurity and resilience, and how this makes organisations stronger

The CyAN Blog
-
by Cyan Staff
My Journey into Governance, Risk and Compliance (GRC) by Sahiba Saggar
14/07/2026

My Journey into Governance, Risk and Compliance (GRC) by Sahiba Saggar

The CyAN Blog
-
by Cyan Staff
Strengthening Patient Safety Through Cybersecurity in Healthcare by Elisabeth Rivière
25/06/2026

Strengthening Patient Safety Through Cybersecurity in Healthcare by Elisabeth Rivière

Healthcare

The CyAN Blog
-
by Cyan Staff