<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Penva Security Insights</title><description>Practical penetration testing and security guidance.</description><link>https://penvasecurity.com.au/</link><language>en-au</language><item><title>The Privacy Act Reforms And The Notifiable Data Breaches Scheme: What “Reasonable Steps” Means Technically</title><link>https://penvasecurity.com.au/blog/the-privacy-act-reforms-and-the-notifiable-data-breaches-scheme-what-reasonable-steps-means-technically/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/the-privacy-act-reforms-and-the-notifiable-data-breaches-scheme-what-reasonable-steps-means-technically/</guid><description>Learn how Privacy Act reforms and the Notifiable Data Breaches scheme relate to reasonable security steps, technical safeguards, risk assessments and breach response.</description><pubDate>Mon, 26 Oct 2026 11:31:31 GMT</pubDate><author>SEO</author></item><item><title>PCI DSS 4.0 Requirement 11.4: What Changed For Segmentation Testing And Scope?</title><link>https://penvasecurity.com.au/blog/pci-dss-4-0-requirement-11-4-what-changed-for-segmentation-testing-and-scope/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/pci-dss-4-0-requirement-11-4-what-changed-for-segmentation-testing-and-scope/</guid><description>Learn how PCI DSS 4.0 Requirement 11.4 covers penetration testing, segmentation validation, testing frequency, and cardholder data environment scope for compliance.</description><pubDate>Mon, 26 Oct 2026 11:22:33 GMT</pubDate><author>SEO</author></item><item><title>SOC 2 Type II and Penetration Testing: Why Auditors Ask for It Even When It’s Not Mandatory</title><link>https://penvasecurity.com.au/blog/soc-2-type-ii-and-penetration-testing-why-auditors-ask-for-it-even-when-its-not-mandatory/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/soc-2-type-ii-and-penetration-testing-why-auditors-ask-for-it-even-when-its-not-mandatory/</guid><description>Learn why SOC 2 Type II auditors request penetration testing, even when it is not mandatory, and how security assessments help demonstrate effective security controls.</description><pubDate>Mon, 26 Oct 2026 11:11:08 GMT</pubDate><author>SEO</author></item><item><title>Does ISO 27001:2022 Actually Require a Penetration Test?</title><link>https://penvasecurity.com.au/blog/does-iso-270012022-actually-require-a-penetration-test/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/does-iso-270012022-actually-require-a-penetration-test/</guid><description>Learn whether ISO 27001:2022 requires penetration testing, how security assessments support compliance, and what organisations should know about key audit expectations.</description><pubDate>Mon, 26 Oct 2026 10:56:48 GMT</pubDate><author>SEO</author></item><item><title>Benefits of Penetration Testing</title><link>https://penvasecurity.com.au/blog/benefits-of-penetration-testing/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/benefits-of-penetration-testing/</guid><description>Understand the benefits of penetration testing, including improved security, and cost savings. Learn how Penva Security protects your organisation.</description><pubDate>Sun, 03 May 2026 03:36:34 GMT</pubDate><author>Dev</author></item><item><title>ISO 27001 Certification Consultants</title><link>https://penvasecurity.com.au/blog/iso-27001-certification-consultants/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/iso-27001-certification-consultants/</guid><description>Looking for ISO 27001 certification consultants? Learn how expert guidance can help your organisation achieve certification and meet compliance requirements.</description><pubDate>Sun, 03 May 2026 02:49:26 GMT</pubDate><author>Dev</author></item><item><title>Penetration Testing and Cyber Security</title><link>https://penvasecurity.com.au/blog/penetration-testing-and-cyber-security/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/penetration-testing-and-cyber-security/</guid><description>Understand how penetration testing supports cyber security, the key differences between them, and why both are important for protecting your organisation.</description><pubDate>Sun, 03 May 2026 02:40:22 GMT</pubDate><author>Dev</author></item><item><title>Red Teaming vs. Penetration Testing: What’s the Difference and Which Do You Need?</title><link>https://penvasecurity.com.au/blog/red-teaming-vs-penetration-testing-whats-the-difference-and-which-do-you-need/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/red-teaming-vs-penetration-testing-whats-the-difference-and-which-do-you-need/</guid><description>Learn the difference between red teaming and penetration testing, how each approach works, and which security assessment best suits your organisation.</description><pubDate>Sat, 16 Aug 2025 08:55:05 GMT</pubDate><author>Dev</author></item><item><title>Top 5 Cloud Security Risks You Need to Watch in 2025</title><link>https://penvasecurity.com.au/blog/top-5-cloud-security-risks-you-need-to-watch-in-2025/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/top-5-cloud-security-risks-you-need-to-watch-in-2025/</guid><description>Discover five important cloud security risks businesses need to watch and learn practical ways to identify vulnerabilities and strengthen protection.</description><pubDate>Sat, 16 Aug 2025 08:54:19 GMT</pubDate><author>Dev</author></item><item><title>Why Manual Penetration Testing Still Beats Automated Scans in 2025</title><link>https://penvasecurity.com.au/blog/why-manual-penetration-testing-still-beats-automated-scans-in-2025/</link><guid isPermaLink="true">https://penvasecurity.com.au/blog/why-manual-penetration-testing-still-beats-automated-scans-in-2025/</guid><description>Discover why manual penetration testing can identify vulnerabilities that automated scans may miss and why human expertise remains essential.</description><pubDate>Sat, 16 Aug 2025 08:53:31 GMT</pubDate><author>Dev</author></item></channel></rss>