Security Knowledge Base

The GDPR is the EU regulation on protection of personal data. This guide summarizes its principles, data subject rights, and main obligations (records of processing, breach notification, DPIA, retention, processors). 

Regulation on the organization of ensuring uninterrupted functioning during a special period of the banking system of Ukraine, activity of non-bank financial institutions and other persons under NBU supervision (NBU Board Resolution 14.06.2024 No. 67).

Regulation on the organization of measures to ensure information security and cyber protection by financial service providers (NBU Board Resolution 09.12.2025 No. 143). Applies to insurers, credit unions, financial companies, and pawnshops. Covers governance, risk management, access control, MFA, logging, network protection, incident management, and third parties.  

PCI DSS defines 12 requirements in 6 goals for protecting cardholder data. SecBoard supports compliance via Framework Compliance (controls and evidence), PCI DSS Standard (app_std) for requirement text, and Asset, KeyCert, Document Register, Cabinet, SOC, Incident Register, Risk, Gophish, and Study for scope, crypto, policies, access, logging, and awareness. This guide explains the goals and requirements and how each module helps meet and demonstrate them.

Every organization needs an incident response plan. Learn what to include and how to prepare your team.

Zero Trust is a security concept centered on the belief that organizations should not automatically trust anything inside or outside their perimeters.

Wazuh is a free, open-source security platform for threat detection, integrity monitoring, and incident response.

Ransomware attacks can cripple organizations. Learn how to prevent attacks and respond effectively if targeted.

Phishing is one of the most common cyber threats. Learn how to identify and protect against phishing attacks.