Insights
Practical notes on compliance, security operations, threat intelligence and the standards behind them, from the Nigehban security team.
Latest · Critical infrastructureWhy cameras, door readers and sensors belong in your SOC
Physical security devices are networked computers. Treating them separately leaves a gap attackers use.
Why cameras, door readers and sensors belong in your SOC
Physical security devices are networked computers. Treating them separately leaves a gap attackers use.
12 November 2026 · 1 min read
Gulf and SaudiHow Saudi Arabia’s cybersecurity controls fit together
ECC, CCC, CSCC, SAMA and PDPL answer different questions. Here is a simple way to see which apply to you.
12 November 2026 · 1 min read
ComplianceWhich standard should you start with?
Most organisations face several standards at once. Here is how to pick a starting point without doing the work twice.
12 November 2026 · 1 min read
Security operationsWhat “local-only” should mean in a SOC
Many platforms claim on-premises operation yet still lean on the cloud. Three questions that reveal the difference.
12 November 2026 · 1 min read
Security operationsThe log source that stopped talking
A quiet dashboard is not always a calm network. How to catch the sources that go silent.
12 November 2026 · 1 min read
ComplianceISO/IEC 27001 or NIST CSF: which do you need?
One is certifiable, the other is a flexible framework. How they differ and how they work together.
11 November 2026 · 1 min read
ComplianceWhat a good gap assessment should deliver
A gap assessment is only useful if it ends in decisions. What to expect in the report.
10 November 2026 · 1 min read
ComplianceAudit evidence that holds up
Policies are not proof. What auditors actually ask to see, and how to keep it ready.
9 November 2026 · 1 min read
ComplianceA practical readiness checklist for national frameworks
Eight foundations to put in place before any audit. They apply to PISF and most similar frameworks.
8 November 2026 · 1 min read
Security operationsSizing a SIEM: why events per second is only the start
Licence size, storage and hardware all depend on more than one number.
7 November 2026 · 1 min read
Security operationsAutomating response without losing control
Playbooks save time, but the wrong automation can cause outages. Where to keep a human in the loop.
6 November 2026 · 1 min read
Security operationsUsing MITRE ATT&CK to find your detection gaps
Mapping detections to ATT&CK shows what you can see and what you cannot.
5 November 2026 · 1 min read
AI securityTesting AI applications before attackers do
Chatbots and AI agents introduce new weaknesses. What to test, and how to do it in a closed network.
4 November 2026 · 1 min read
Threat intelligenceWhy stolen credentials are the quiet front door
Infostealer malware turns one infected laptop into valid logins. How to find out and respond.
3 November 2026 · 1 min read
GovernanceWhere your logs and AI actually run
Data residency applies to security tooling too. Questions to ask every vendor.
2 November 2026 · 1 min read