OAS insights
Practical, jargon-free guidance on cybersecurity, Citrix, cloud and compliance — from a team that deploys this every day.
Latest insight
The FSCA and Prudential Authority cyber resilience standard sets out what a financial institution's backup strategy, recovery targets and testing must show. Here is how to produce it.
Read the articlePublic TLS certificates are capped at 200 days today and fall to 47 days by March 2029. How to use NetScaler Console to find every certificate, get warned in time and automate renewal.
02
The Information Regulator has fined a national department and a municipality. What those cases say about licences, logging, backups and breach notification in government IT.
03
Ransomware reaches the plant floor through the corporate network. This checklist helps South African manufacturers separate IT from OT and keep production running.
04
Most Microsoft 365 tenants already licence data loss prevention and never switch it on. This guide builds a first policy for South African ID numbers and rolls it out without blocking anyone.
05
Moving from signature antivirus to SentinelOne is a project, not an installer. This checklist covers the inventory, removing the old product, Defender on servers, policy staging and rollback checks.
06
deviceTRUST ships inside Citrix Workspace app and the VDA, so installation is no longer the hard part. This checklist covers entitlement, prerequisites, a notify-first pilot and staged enforcement.
07
Banks, insurers and funds now send their law, accounting and consulting firms security questionnaires. This checklist explains why, what the questions mean and which evidence to have ready.
08
Azure spend drifts when nobody owns it. This checklist covers the controls Microsoft provides for budgets, tags, right-sizing and commitments, and the order in which to put them in place.
09
Peak trading is also peak risk. A practical checklist for South African retail IT teams covering patching, payment pages, endpoints, recovery tests and POPIA notification before Black Friday.
10
Azure bills a Citrix DaaS desktop for every minute its VM is allocated. This checklist covers the Autoscale, load-balancing and provisioning settings that decide how many minutes you pay for.
11
A slow logon is a chain of stages, not one fault. This guide shows how uberAgent breaks a Citrix or Windows logon into measurable phases, which metrics to read first, and what changed in uberAgent 8.
12
A convincing voice note is no longer proof of identity. Use this practical verification playbook before an urgent payment or access request becomes an incident.
13
AI agents can read data and take actions across systems. Give them an enforceable identity, data and observability baseline before adoption spreads.
14
Citrix highlighted DaaS Flex on Azure in its August 2026 roadmap update. Here are the architecture questions SA teams should answer before choosing it.
15
Security dashboards count alerts. Resilience reporting should show how quickly the organisation can protect, detect and recover when controls are tested.
16
A successful backup job is not a recovery test. Use a risk-based cadence that proves priority services can return within their agreed RTO and RPO.
17
N-able says on-premises N-central customers must install 2026.3.1.10 immediately. Here is a source-bounded checklist and the limits of a clean indicator scan.
18
August 2026 is a Windows 11 hotpatch month for eligible devices. Fewer restarts help users, but they do not remove testing, coverage and exception management.
19
Citrix's July 2026 DaaS update adds four Advisor checks covering communication, StoreFront placement, maintenance mode, and Always On Tracing.
20
NetScaler Console's July 2026 update adds one workflow for GeoIP database synchronization across Console, agents, and managed instances. Here is the operational scope.
21
Citrix has announced NetScaler MCP Gateway as a governed entry point between AI agents and backend MCP servers. Here is the bounded governance question for infrastructure and security teams.
22
Citrix now positions UniconOS Management with Local and Cloud operating models. The key choice is who operates the management-platform infrastructure.
23
Citrix says XenServer 9 is generally available and included in specified Citrix entitlements. Infrastructure teams still need to verify their own terms and technical fit.
24
Your MFA may be giving you a false sense of security. SMS codes and push prompts can be phished. Passkeys and phishing-resistant MFA cannot. Here is how to make the switch.
25
Everyone wants zero downtime and zero data loss. Almost nobody is willing to pay for it. RTO and RPO are how you make that trade-off honestly — here is how to set them.
26
Conditional Access is the most powerful security control in Microsoft 365 — and the easiest to misconfigure. Here is a baseline that works, and how to roll it out without locking everyone out.
27
Modern ransomware encrypts your backups before it encrypts your data. Immutable cloud backups are the only way to guarantee recovery. Here's how they work.
28
South African government departments face mounting pressure to modernise IT while maintaining data sovereignty and security. Here is the path forward.
29
Your team works from home, coffee shops, and co-working spaces. Are their devices protected? 7 practical tips to secure every remote endpoint.
30
Citrix file-based licensing ends 15 April 2026. If your organisation runs on-premises Citrix, the License Activation Service migration is not optional. Here is what you need to know — and what to do now.
31
AVD or Citrix DaaS? Both deliver virtual desktops — but they solve different problems. Here is an honest comparison from a team that deploys both.
32
Traditional backups send the entire changed file every time. Cove's TrueDelta sends only the changed blocks — making incrementals 60x smaller. Here's how it works.
33
The FSCA Joint Standard on cybersecurity is now in enforcement. Here is what financial services firms need — and how to prove compliance to regulators.
34
VDI is not one-size-fits-all in 2026. On-premises, cloud, or hybrid — each model has trade-offs. This buyer's guide breaks down the real decision factors for IT directors evaluating virtual desktop delivery.
35
Cloud migration fails when it starts with technology instead of planning. This step-by-step guide covers assessment, strategy, execution, and rollback — built for SA businesses.
36
93% of businesses without a tested disaster recovery plan close within a year of a major data loss. Use this checklist to make sure yours actually works.
37
Break-fix IT was fine when you had five PCs. But if the same problems keep coming back and surprise invoices keep arriving, you have outgrown it.
38
Zero trust is not a product you buy — it is an architecture you build. Here is how SA enterprises can implement it with tools they may already have.
39
Healthcare is the most targeted sector for ransomware globally. South African hospitals and practices face unique challenges — here is how to address them.
40
Critical NetScaler vulnerabilities are actively exploited by ransomware gangs. South African businesses using Citrix ADC or Gateway must act now. Here's what to do.
41
Microsoft protects the infrastructure. You protect the data. Most businesses do not realise M365 backup is their responsibility — until they lose something they cannot recover.
42
South Africa ranked among Africa's most targeted countries in 2025. Here is what the threat landscape taught us — and what smart businesses are doing about it in 2026.
43
Theory is one thing. Implementation is another. Here is exactly how OAS builds a complete Protect, Detect, Recover security stack — and what each layer actually does.
44
POPIA enforcement is accelerating. Here is what the Information Regulator expects in 2026 — and where most South African businesses still fall short.
45
Every unpatched application is an open door for attackers. Automated patch management closes those doors — across every device, every week, without manual effort.
46
Most organisations with M365 E5 licences use less than half the security features they're paying for. Here's what's actually included — and why it matters.
47
Cove Data Protection backs up direct-to-cloud with no appliances, 60x smaller incrementals, and immutable storage that ransomware cannot touch. Here is why it matters.
48
N-able N-central is the RMM platform powering enterprise IT management. 700+ automations, 100+ third-party patches, and network discovery — all from a single pane of glass.
49
South Africa is the most ransomware-targeted country in Africa. These five steps will protect your business — and they map directly to a proven security framework.
50
Your data doesn't need to leave South Africa. Azure's local regions in Johannesburg and Cape Town give SA businesses POPIA-compliant cloud without compromise.
51
Traditional antivirus catches known threats. SentinelOne catches the ones designed to slip past it. Here is how they compare — and what the switch actually costs.
52
You locked the front door but left the windows open. Most SA businesses invest heavily in one pillar of security and ignore the other two. Here is what that actually costs.
53
Your antivirus can only stop threats it already knows about. EDR watches what software actually does — and stops attacks in real time. Here is why every SA business needs it.
54
