--- title: Internet Security Auditors Blog | Alberto Villar Arévalo description: "PCI SSA, PCI QSA, CISSP, CSSLP, ISO 27001 L.A., CSFPC, SFPC\n
Security Consultant\n
Consulting Department" --- English - [Spanish](https://blog.isecauditors.com/) - [English](https://blog.isecauditors.com/en/author/alberto-villar/page/1) [![290x123px\_isecauditors](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/290x123px_isecauditors.png?width=290&height=91&name=290x123px_isecauditors.png) ![290x123px\_isecauditors](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/290x123px_isecauditors.png?width=290&height=91&name=290x123px_isecauditors.png)](https://blog.isecauditors.com/?hsLang=en) - [← www.isecauditors.com](https://www.isecauditors.com/) - [academy.isecauditors.com](https://academy.isecauditors.com/) - [← www.isecauditors.com](https://www.isecauditors.com/) - [academy.isecauditors.com](https://academy.isecauditors.com/) # ISecAuditors Blog Your security is our success ### Archive - [October 2026 (24)](https://blog.isecauditors.com/en/archive/2026/10) - [September 2026 (12)](https://blog.isecauditors.com/en/archive/2026/09) - [August 2026 (6)](https://blog.isecauditors.com/en/archive/2026/08) - [July 2026 (6)](https://blog.isecauditors.com/en/archive/2026/07) - [June 2026 (10)](https://blog.isecauditors.com/en/archive/2026/06) - [May 2026 (14)](https://blog.isecauditors.com/en/archive/2026/05) - [April 2026 (7)](https://blog.isecauditors.com/en/archive/2026/04) - [March 2026 (7)](https://blog.isecauditors.com/en/archive/2026/03) - [February 2026 (1)](https://blog.isecauditors.com/en/archive/2026/02) - [January 2026 (2)](https://blog.isecauditors.com/en/archive/2026/01) - [December 2025 (4)](https://blog.isecauditors.com/en/archive/2025/12) - [November 2025 (1)](https://blog.isecauditors.com/en/archive/2025/11) ### Tags - [AI (12)](https://blog.isecauditors.com/en/tag/ai) - [AIR (11)](https://blog.isecauditors.com/en/tag/air) - [API Audit (1)](https://blog.isecauditors.com/en/tag/api-audit) - [API Testing (1)](https://blog.isecauditors.com/en/tag/api-testing) - [ASV Scans (1)](https://blog.isecauditors.com/en/tag/asv-scans) - [ATMs (1)](https://blog.isecauditors.com/en/tag/atms) - [Authenticated Scans (1)](https://blog.isecauditors.com/en/tag/authenticated-scans) - [CardExpose (2)](https://blog.isecauditors.com/en/tag/cardexpose) - [CISO-as-a-Service (1)](https://blog.isecauditors.com/en/tag/ciso-as-a-service) - [Cloud Security (2)](https://blog.isecauditors.com/en/tag/cloud-security) - [CRA Compliance Assessment and Support (5)](https://blog.isecauditors.com/en/tag/cra-compliance-assessment-and-support) - [CRA Law (5)](https://blog.isecauditors.com/en/tag/cra-law) - [Critical Infrastructure Protection (1)](https://blog.isecauditors.com/en/tag/critical-infrastructure-protection) - [Cryptographic Keys (1)](https://blog.isecauditors.com/en/tag/cryptographic-keys) - [Cumplimiento Normativo (1)](https://blog.isecauditors.com/en/tag/cumplimiento-normativo) - [Data Protection (3)](https://blog.isecauditors.com/en/tag/data-protection) - [DORA Implementation (2)](https://blog.isecauditors.com/en/tag/dora-implementation) - [Encryption (1)](https://blog.isecauditors.com/en/tag/encryption) - [Events (4)](https://blog.isecauditors.com/en/tag/events) - [Generative AI (1)](https://blog.isecauditors.com/en/tag/generative-ai) - [GenIA (1)](https://blog.isecauditors.com/en/tag/genia) - [IA (3)](https://blog.isecauditors.com/en/tag/ia) - [Implementation of an AIMS (3)](https://blog.isecauditors.com/en/tag/implementation-of-an-aims) - [Implementation of an SGIA (14)](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) - [Intrusion Test (9)](https://blog.isecauditors.com/en/tag/intrusion-test) - [ISO 27002 (3)](https://blog.isecauditors.com/en/tag/iso-27002) - [ISO 27701 (1)](https://blog.isecauditors.com/en/tag/iso-27701) - [ISO 42001 (19)](https://blog.isecauditors.com/en/tag/iso-42001) - [ISO Consulting (4)](https://blog.isecauditors.com/en/tag/iso-consulting) - [ISO ISMS 27001 Consulting (6)](https://blog.isecauditors.com/en/tag/iso-isms-27001-consulting) - [MKO PCI (1)](https://blog.isecauditors.com/en/tag/mko-pci) - [Mobile Application Audit (1)](https://blog.isecauditors.com/en/tag/mobile-application-audit) - [National Security Framework (1)](https://blog.isecauditors.com/en/tag/national-security-framework) - [NIS2 Directive (2)](https://blog.isecauditors.com/en/tag/nis2-directive) - [NIST CSF Consulting and Implementation (4)](https://blog.isecauditors.com/en/tag/nist-csf-consulting-and-implementation) - [OWASP TOP10 LLM (1)](https://blog.isecauditors.com/en/tag/owasp-top10-llm) - [Payment Security (5)](https://blog.isecauditors.com/en/tag/payment-security) - [PCI 3DS (1)](https://blog.isecauditors.com/en/tag/pci-3ds) - [PCI Compliance (15)](https://blog.isecauditors.com/en/tag/pci-compliance) - [PCI PIN (1)](https://blog.isecauditors.com/en/tag/pci-pin) - [PCI SSF (1)](https://blog.isecauditors.com/en/tag/pci-ssf) - [PCI SSS (1)](https://blog.isecauditors.com/en/tag/pci-sss) - [PCI Standards (1)](https://blog.isecauditors.com/en/tag/pci-standards) - [Protección de Datos (1)](https://blog.isecauditors.com/en/tag/protección-de-datos) - [Red Team (3)](https://blog.isecauditors.com/en/tag/red-team) - [Risk Management (1)](https://blog.isecauditors.com/en/tag/risk-management) - [Secure configurations (4)](https://blog.isecauditors.com/en/tag/secure-configurations) - [Security Audits (5)](https://blog.isecauditors.com/en/tag/security-audits) - [Security Consulting (5)](https://blog.isecauditors.com/en/tag/security-consulting) - [Security for AI Ecosystems (5)](https://blog.isecauditors.com/en/tag/security-for-ai-ecosystems) - [Serverless (1)](https://blog.isecauditors.com/en/tag/serverless) - [Social Engineering (2)](https://blog.isecauditors.com/en/tag/social-engineering) - [SWIFT (1)](https://blog.isecauditors.com/en/tag/swift) - [System Hardening (2)](https://blog.isecauditors.com/en/tag/system-hardening) - [Training (6)](https://blog.isecauditors.com/en/tag/training) - [Vulnerabilities (3)](https://blog.isecauditors.com/en/tag/vulnerabilities) - [Vulnerability Management (1)](https://blog.isecauditors.com/en/tag/vulnerability-management) BLOG # All articles from Alberto Villar Arévalo [![The Challenge of PCI DSS in Serverless Architectures (Lambda, Cloud Functions)](https://blog.isecauditors.com/hs-fs/hubfs/El%20reto%20de%20PCI%20DSS%20en%20arquitecturas%20Serverless.png?width=596&name=El%20reto%20de%20PCI%20DSS%20en%20arquitecturas%20Serverless.png)](https://blog.isecauditors.com/en/the-challenge-of-pci-dss-in-serverless-architectures-lambda-cloud-functions) Oct 23, 2026, 10:43:31 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [The Challenge of PCI DSS in Serverless Architectures (Lambda, Cloud Functions)](https://blog.isecauditors.com/en/the-challenge-of-pci-dss-in-serverless-architectures-lambda-cloud-functions) [Read More](https://blog.isecauditors.com/en/the-challenge-of-pci-dss-in-serverless-architectures-lambda-cloud-functions) [![The PHP emergency requires patching and verifying website security](https://blog.isecauditors.com/hs-fs/hubfs/vulnerabilidades-php.png?width=596&name=vulnerabilidades-php.png)](https://blog.isecauditors.com/en/the-php-emergency-requires-patching-and-verifying-website-security) Oct 22, 2026, 9:29:01 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [The PHP emergency requires patching and verifying website security](https://blog.isecauditors.com/en/the-php-emergency-requires-patching-and-verifying-website-security) [Read More](https://blog.isecauditors.com/en/the-php-emergency-requires-patching-and-verifying-website-security) [![Booking under investigation: preventing fraud requires verifiable controls](https://blog.isecauditors.com/hs-fs/hubfs/booking-under-investigation.png?width=596&name=booking-under-investigation.png)](https://blog.isecauditors.com/en/booking-under-investigation-preventing-fraud-requires-verifiable-controls) Oct 21, 2026, 3:03:45 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [Booking under investigation: preventing fraud requires verifiable controls](https://blog.isecauditors.com/en/booking-under-investigation-preventing-fraud-requires-verifiable-controls) [Read More](https://blog.isecauditors.com/en/booking-under-investigation-preventing-fraud-requires-verifiable-controls) [![DORA 360º: Governance, Risk and Continuity in the Financial Ecosystem](https://blog.isecauditors.com/hs-fs/hubfs/ria-en-2026-la-obligacion-legal-ya-esta-en-marcha.png?width=596&name=ria-en-2026-la-obligacion-legal-ya-esta-en-marcha.png)](https://blog.isecauditors.com/en/dora-360-governance-risk-and-continuity-in-the-financial-ecosystem) Oct 21, 2026, 10:40:55 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [DORA 360º: Governance, Risk and Continuity in the Financial Ecosystem](https://blog.isecauditors.com/en/dora-360-governance-risk-and-continuity-in-the-financial-ecosystem) [Read More](https://blog.isecauditors.com/en/dora-360-governance-risk-and-continuity-in-the-financial-ecosystem) [![ISO/IEC 27090: protecting AI from data to retraining](https://blog.isecauditors.com/hs-fs/hubfs/ISO-IEC%2027090%20proteger%20la%20IA%20desde%20los%20datos%20hasta%20el%20reentrenamiento.png?width=596&name=ISO-IEC%2027090%20proteger%20la%20IA%20desde%20los%20datos%20hasta%20el%20reentrenamiento.png)](https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining) Oct 20, 2026, 4:11:21 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [ISO/IEC 27090: protecting AI from data to retraining](https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining) [Read More](https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining) [![EN 18286: a new route to demonstrate AI conformity](https://blog.isecauditors.com/hs-fs/hubfs/primera-denuncia-aepd.png?width=596&name=primera-denuncia-aepd.png)](https://blog.isecauditors.com/en/en-18286-a-new-route-to-demonstrate-ai-conformity) Oct 19, 2026, 4:30:00 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [EN 18286: a new route to demonstrate AI conformity](https://blog.isecauditors.com/en/en-18286-a-new-route-to-demonstrate-ai-conformity) [Read More](https://blog.isecauditors.com/en/en-18286-a-new-route-to-demonstrate-ai-conformity) [![A backdoor inside AI: govern and verify before deployment](https://blog.isecauditors.com/hs-fs/hubfs/Designer-1.png?width=596&name=Designer-1.png)](https://blog.isecauditors.com/en/a-backdoor-inside-ai-govern-and-verify-before-deployment) Oct 19, 2026, 1:30:00 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [A backdoor inside AI: govern and verify before deployment](https://blog.isecauditors.com/en/a-backdoor-inside-ai-govern-and-verify-before-deployment) [Read More](https://blog.isecauditors.com/en/a-backdoor-inside-ai-govern-and-verify-before-deployment) [![AI agents: permissions and oversight before taking action](https://blog.isecauditors.com/hs-fs/hubfs/primera-denuncia-aepd.png?width=596&name=primera-denuncia-aepd.png)](https://blog.isecauditors.com/en/ai-agents-permissions-and-oversight-before-taking-action) Oct 19, 2026, 10:58:53 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [AI agents: permissions and oversight before taking action](https://blog.isecauditors.com/en/ai-agents-permissions-and-oversight-before-taking-action) [Read More](https://blog.isecauditors.com/en/ai-agents-permissions-and-oversight-before-taking-action) [![Energy and cybersecurity: from protection to resilience](https://blog.isecauditors.com/hs-fs/hubfs/banner%20-%20IA%20agentica%20y%20fraude%20digital.png?width=596&name=banner%20-%20IA%20agentica%20y%20fraude%20digital.png)](https://blog.isecauditors.com/en/energy-and-cybersecurity-from-protection-to-resilience) Oct 16, 2026, 9:56:17 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [Energy and cybersecurity: from protection to resilience](https://blog.isecauditors.com/en/energy-and-cybersecurity-from-protection-to-resilience) [Read More](https://blog.isecauditors.com/en/energy-and-cybersecurity-from-protection-to-resilience) [![Cybercrises: prepared decisions to protect the business](https://blog.isecauditors.com/hs-fs/hubfs/Cibercrisis-decisiones%20preparadas%20para%20proteger%20el%20negocio.png?width=596&name=Cibercrisis-decisiones%20preparadas%20para%20proteger%20el%20negocio.png)](https://blog.isecauditors.com/en/cybercrises-prepared-decisions-to-protect-the-business) Oct 15, 2026, 11:40:17 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [Cybercrises: prepared decisions to protect the business](https://blog.isecauditors.com/en/cybercrises-prepared-decisions-to-protect-the-business) [Read More](https://blog.isecauditors.com/en/cybercrises-prepared-decisions-to-protect-the-business) [![El caso ASOS: proteger las cuentas, los proveedores y los datos](https://blog.isecauditors.com/hs-fs/hubfs/Supporting%20applications%20a%20priority%20for%20protecting%20business%20data.png?width=596&name=Supporting%20applications%20a%20priority%20for%20protecting%20business%20data.png)](https://blog.isecauditors.com/en/the-asos-case-protecting-accounts-suppliers-and-data) Oct 14, 2026, 4:00:01 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [The ASOS case: protecting accounts, suppliers and data](https://blog.isecauditors.com/en/the-asos-case-protecting-accounts-suppliers-and-data) [Read More](https://blog.isecauditors.com/en/the-asos-case-protecting-accounts-suppliers-and-data) [Legal Notice](https://www.isecauditors.com/aviso-legal) [Policy Privacy](https://www.isecauditors.com/politica-privacidad) [Cookie Policy](https://www.isecauditors.com/politica-cookies) [![The Challenge of PCI DSS in Serverless Architectures (Lambda, Cloud Functions)](https://blog.isecauditors.com/hubfs/El%20reto%20de%20PCI%20DSS%20en%20arquitecturas%20Serverless.png)](https://blog.isecauditors.com/en/the-challenge-of-pci-dss-in-serverless-architectures-lambda-cloud-functions) ## [The Challenge of PCI DSS in Serverless Architectures (Lambda, Cloud Functions)](https://blog.isecauditors.com/en/the-challenge-of-pci-dss-in-serverless-architectures-lambda-cloud-functions) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [PCI Compliance](https://blog.isecauditors.com/en/tag/pci-compliance)[Serverless](https://blog.isecauditors.com/en/tag/serverless) Oct 23, 2026, 10:43:31 AM The objective of this article is to analyze how to apply PCI DSS v4.0.1 to serverless architectures,... [Read more](https://blog.isecauditors.com/en/the-challenge-of-pci-dss-in-serverless-architectures-lambda-cloud-functions) [![The PHP emergency requires patching and verifying website security](https://blog.isecauditors.com/hubfs/vulnerabilidades-php.png)](https://blog.isecauditors.com/en/the-php-emergency-requires-patching-and-verifying-website-security) ## [The PHP emergency requires patching and verifying website security](https://blog.isecauditors.com/en/the-php-emergency-requires-patching-and-verifying-website-security) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [System Hardening](https://blog.isecauditors.com/en/tag/system-hardening)[Security Audits](https://blog.isecauditors.com/en/tag/security-audits)[Security Consulting](https://blog.isecauditors.com/en/tag/security-consulting) Oct 22, 2026, 9:29:01 AM Madrid, 21 October 2026. Two critical vulnerabilities in PHP, a technology used by many web applicat... [Read more](https://blog.isecauditors.com/en/the-php-emergency-requires-patching-and-verifying-website-security) [![Booking under investigation: preventing fraud requires verifiable controls](https://blog.isecauditors.com/hubfs/booking-under-investigation.png)](https://blog.isecauditors.com/en/booking-under-investigation-preventing-fraud-requires-verifiable-controls) ## [Booking under investigation: preventing fraud requires verifiable controls](https://blog.isecauditors.com/en/booking-under-investigation-preventing-fraud-requires-verifiable-controls) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [API Testing](https://blog.isecauditors.com/en/tag/api-testing)[Security Audits](https://blog.isecauditors.com/en/tag/security-audits)[Social Engineering](https://blog.isecauditors.com/en/tag/social-engineering) Oct 21, 2026, 3:03:45 PM Madrid, 21 October 2026. The European Commission has opened formal proceedings to assess possible br... [Read more](https://blog.isecauditors.com/en/booking-under-investigation-preventing-fraud-requires-verifiable-controls) [![DORA 360º: Governance, Risk and Continuity in the Financial Ecosystem](https://blog.isecauditors.com/hubfs/ria-en-2026-la-obligacion-legal-ya-esta-en-marcha.png)](https://blog.isecauditors.com/en/dora-360-governance-risk-and-continuity-in-the-financial-ecosystem) ## [DORA 360º: Governance, Risk and Continuity in the Financial Ecosystem](https://blog.isecauditors.com/en/dora-360-governance-risk-and-continuity-in-the-financial-ecosystem) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [DORA Implementation](https://blog.isecauditors.com/en/tag/dora-implementation) Oct 21, 2026, 10:40:55 AM DORA in 2026: The Adaptation Period Is Over DORA has been fully applicable since 17 January 2025. As... [Read more](https://blog.isecauditors.com/en/dora-360-governance-risk-and-continuity-in-the-financial-ecosystem) [![ISO/IEC 27090: protecting AI from data to retraining](https://blog.isecauditors.com/hubfs/ISO-IEC%2027090%20proteger%20la%20IA%20desde%20los%20datos%20hasta%20el%20reentrenamiento.png)](https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining) ## [ISO/IEC 27090: protecting AI from data to retraining](https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[Security for AI Ecosystems](https://blog.isecauditors.com/en/tag/security-for-ai-ecosystems)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Oct 20, 2026, 4:11:21 PM Madrid, 20 October 2026. ISO and IEC have published ISO/IEC 27090:2026, providing guidance on unders... [Read more](https://blog.isecauditors.com/en/iso-iec-27090-protecting-ai-from-data-to-retraining) [![EN 18286: a new route to demonstrate AI conformity](https://blog.isecauditors.com/hubfs/primera-denuncia-aepd.png)](https://blog.isecauditors.com/en/en-18286-a-new-route-to-demonstrate-ai-conformity) ## [EN 18286: a new route to demonstrate AI conformity](https://blog.isecauditors.com/en/en-18286-a-new-route-to-demonstrate-ai-conformity) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[AIR](https://blog.isecauditors.com/en/tag/air)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Oct 19, 2026, 4:30:00 PM Madrid, 19 October 2026. The European Commission has published the reference to EN 18286:2026, on qu... [Read more](https://blog.isecauditors.com/en/en-18286-a-new-route-to-demonstrate-ai-conformity) [![A backdoor inside AI: govern and verify before deployment](https://blog.isecauditors.com/hubfs/Designer-1.png)](https://blog.isecauditors.com/en/a-backdoor-inside-ai-govern-and-verify-before-deployment) ## [A backdoor inside AI: govern and verify before deployment](https://blog.isecauditors.com/en/a-backdoor-inside-ai-govern-and-verify-before-deployment) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[Security for AI Ecosystems](https://blog.isecauditors.com/en/tag/security-for-ai-ecosystems)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Oct 19, 2026, 1:30:00 PM Madrid, 16 October 2026. ProjectDiscovery has demonstrated how a modification to Qwen2.5-7B-Instruct... [Read more](https://blog.isecauditors.com/en/a-backdoor-inside-ai-govern-and-verify-before-deployment) [![AI agents: permissions and oversight before taking action](https://blog.isecauditors.com/hubfs/primera-denuncia-aepd.png)](https://blog.isecauditors.com/en/ai-agents-permissions-and-oversight-before-taking-action) ## [AI agents: permissions and oversight before taking action](https://blog.isecauditors.com/en/ai-agents-permissions-and-oversight-before-taking-action) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[AIR](https://blog.isecauditors.com/en/tag/air)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Oct 19, 2026, 10:58:53 AM Madrid, 15 October 2026. Anthropic has removed live internet access from all its internal evaluation... [Read more](https://blog.isecauditors.com/en/ai-agents-permissions-and-oversight-before-taking-action) [![Energy and cybersecurity: from protection to resilience](https://blog.isecauditors.com/hubfs/banner%20-%20IA%20agentica%20y%20fraude%20digital.png)](https://blog.isecauditors.com/en/energy-and-cybersecurity-from-protection-to-resilience) ## [Energy and cybersecurity: from protection to resilience](https://blog.isecauditors.com/en/energy-and-cybersecurity-from-protection-to-resilience) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [Security Consulting](https://blog.isecauditors.com/en/tag/security-consulting)[Critical Infrastructure Protection](https://blog.isecauditors.com/en/tag/critical-infrastructure-protection) Oct 16, 2026, 9:56:17 AM Madrid, 15 October 2026. Energy digitalisation requires protection of the systems that support servi... [Read more](https://blog.isecauditors.com/en/energy-and-cybersecurity-from-protection-to-resilience) [![Cybercrises: prepared decisions to protect the business](https://blog.isecauditors.com/hubfs/Cibercrisis-decisiones%20preparadas%20para%20proteger%20el%20negocio.png)](https://blog.isecauditors.com/en/cybercrises-prepared-decisions-to-protect-the-business) ## [Cybercrises: prepared decisions to protect the business](https://blog.isecauditors.com/en/cybercrises-prepared-decisions-to-protect-the-business) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [Intrusion Test](https://blog.isecauditors.com/en/tag/intrusion-test)[Security Consulting](https://blog.isecauditors.com/en/tag/security-consulting)[Risk Management](https://blog.isecauditors.com/en/tag/risk-management) Oct 15, 2026, 11:40:17 AM Madrid, 14 October 2026. Internet Security Auditors recommends bringing cybersecurity, incident resp... [Read more](https://blog.isecauditors.com/en/cybercrises-prepared-decisions-to-protect-the-business) [![El caso ASOS: proteger las cuentas, los proveedores y los datos](https://blog.isecauditors.com/hubfs/Supporting%20applications%20a%20priority%20for%20protecting%20business%20data.png)](https://blog.isecauditors.com/en/the-asos-case-protecting-accounts-suppliers-and-data) ## [The ASOS case: protecting accounts, suppliers and data](https://blog.isecauditors.com/en/the-asos-case-protecting-accounts-suppliers-and-data) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [Intrusion Test](https://blog.isecauditors.com/en/tag/intrusion-test)[Security Consulting](https://blog.isecauditors.com/en/tag/security-consulting)[Social Engineering](https://blog.isecauditors.com/en/tag/social-engineering) Oct 14, 2026, 4:00:01 PM Madrid, 14 October 2026. Internet Security Auditors encourages organisations to assess social engine... [Read more](https://blog.isecauditors.com/en/the-asos-case-protecting-accounts-suppliers-and-data) --- Copyright © 2026 - All rights reserved