Emerging threats
Outsourced payment page? The common mistake retailers make with PCI DSS
"We're PCI compliant — our payment provider handles the security"This is a common misconception PGI hears from security and compliance teams, and it's a dangerous assumption in the world of e-commerce.
The questions your information security consultant should be asking you
You have clients approaching you with a brief of what they want. What's the pattern you keep seeing?"Recently I’ve noticed that clients often come in with a clear idea of what they think they need: A specific framework, certification or service they've heard about.
DCC Applicant Guidance May 2026 update: Here’s what you need to know
The Ministry of Defence (MoD) recently requested that all industry partners must achieve at least DCC Level 0 by the end of 2026.
What’s the difference between DCC Level 0 and 1?
The Defence Cyber Certification (DCC) scheme runs from Level 0 up to Level 3, but the most significant step is the one between 0 and 1.
How a Defence Cyber Certification (DCC) can help you win more contracts
The UK Ministry of Defence (MoD) recently introduced the Defence Cyber Certification (DCC) Scheme: a framework for suppliers in the defence supply chain.
How to assess third-party risk: Supplier due diligence in 4 steps
What is third-party due diligence? Third-party due diligence is simply the process of evaluating the third parties you work with—like your suppliers and service providers—to ensure they meet your internal standards for security and compliance.
If you supply the defence sector, you need to know about DCC
The UK Ministry of Defence (MoD) has introduced the new Defence Cyber Certification (DCC) scheme: a security framework for suppliers in the defence supply chain, designed to enhance overall resilience against cyber threat.
ISO 27001 explained: What it can (and can't) do for your business
With the continued rise in cyber attacks—particularly those targeting supply chains—there’s been growing pressure within the industry for organisations to demonstrate information security to clients, partners and regulators.