Home / Guides
Regulation Guides
What ASEAN cybersecurity rules actually require, mapped to the product categories they pull into a purchase. New guide every week.
MAS TRM
What Singapore's MAS Technology Risk Management rules actually require, which security product categories each requirement maps to, and what changes in 2026–2027.
BNM RMiT
What Bank Negara Malaysia's Risk Management in Technology (RMiT) policy requires of Malaysian financial institutions, mapped to security product categories, including the NCII Code of Practice.
Malaysia Cyber Security Act 2024 (NACSA)
What Malaysia's Cyber Security Act 2024 (Act 854) requires of NCII entities and of SOC and penetration testing providers, the NACSA licensing rules, penalties, and what it means for selling cybersecurity in Malaysia.
Singapore PDPA
What Singapore's Personal Data Protection Act requires on security, breach notification and penalties, mapped to the PDPC's ICT practices and the security product categories they call for.