PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Non-Compliant, So What?

blog.quarkslab.com | research | #compliance | #cryptography | #risk-management | #policy | #audit | #recommendations
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's crypto team discusses low-severity non-compliance findings in audits: why they matter beyond certifications, and how to help clients fix issues that weaken long-term security.
Published
Collected

Related coverage

vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
blog · certik.com
U.S Legislation September Recap: Congress Blinked. The Regulators Didn’t.
We look at United States regulatory updates in September 2026, including the results of the CLARITY Act votes, updates on tokenized stocks, market structure guidance by the CFTC, and more.
blog · certik.com
From Warning Letters to Working Framework: CertiK and Brazil's Central Bank on Building the VASP Rulebook
CertiK's Jason Jiang and the Central Bank of Brazil's Nagel Paulino join Veirano Advogados' Marcos Rocha to trace Brazil's journey from early crypto warnings to a detailed VASP framework.
blog · certik.com
Why Brazil Is Becoming a Blueprint for Digital Asset Regulation
At Blockchain.RIO, CertiK's CBO Jason Jiang joined Brazil's Central Bank and Veirano Advogados to discuss how collaborative VASP regulation is making Brazil a model for digital asset compliance.
blog · certik.com
How to Prepare for a CCSS Audit
The CryptoCurrency Security Standard (CCSS) certifies how businesses protect private keys across ten control aspects. This guide explains what the audit covers, the three levels, and how to prepare.
blog · certik.com
SOC 2 and ISO 27001 for Crypto Companies
SOC 2 is a CPA-issued attestation and ISO 27001 a certification of your ISMS; this guide compares both frameworks and charts the year-long path from gap remediation to a passed audit.
Back