Security
What customers ask about security, and what the European rules say.
DORA, for product leaders who sell to banks and insurersWhat the Digital Operational Resilience Act asks banks and insurers to put in their contracts with software suppliers, in plain terms, with every legal fact linked to its article. Not legal advice.
A security contact your customers can findWhy a product should say where vulnerabilities are reported, and what security.txt and a coordinated disclosure policy are, with every source linked. Not legal advice, and no compliance promise.
The Cyber Resilience Act, for product leadersWhat the Cyber Resilience Act asks of products with digital elements, in plain terms, with the source linked for every legal fact. Not legal advice, and no compliance promise.
The OWASP Top 10, for product leadersThe current OWASP Top 10, the 2025 edition, in plain terms. What each of the ten categories means for a product, and the question a leader can ask their team about it.
Passwords and sign-in, by the NIST guidelines, for product leadersWhat NIST SP 800-63B-4 says about passwords and sign-in, in plain terms, each point linked to the section that says it. Length, periodic changes, breached passwords, a second factor.
When a customer asks for a software bill of materialsWhat a software bill of materials is, why buyers and the Cyber Resilience Act ask for one, and what a product leader should be able to answer, with every source linked. Not legal advice, and no compliance promise.
Guides on this topic
Lift your eyes and let us carry the rest.
Talk to us and see what carrying your product forward looks like.
Book a conversation
Prefer to write directly? contact@zefana.com