Q&A with Jonathan Armstrong: An Inside Look at CREST Accreditation

NetSPI surveys financial services testing regulations including CBEST, DORA, TIBER-EU, iCAST, and CORIE, outlining five areas firms should address to comply with threat-led testing mandates.

Clarifying Australia's two CREST bodies: CREST ANZ and CREST International are unaffiliated — their relationship ended in 2019, standards differ, and only International confers global accreditation.

Ethiack explains the ECB letter requiring eurozone banks to submit AI-attack action plans by October 31, 2026, framing frontier AI as a structural shift in cyber risk and detailing demands on banks.

In a Link to Leaders interview, Ethiack CEO Jorge Monteiro explains how DORA makes continuous vulnerability management a legal requirement for finance and how autonomous hacking boosts resilience.

Project Black's CREST member company accreditation in Australasia for penetration testing, complementing its CREST-certified consultants, plus an explainer on company vs individual accreditation.

Learn why traditional third-party risk management fails and what CISOs must demand from vendors, including continuous pentesting, to manage third-party risk effectively.