<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://www.infosec.mn/</loc><changefreq>weekly</changefreq><priority>1.0</priority></url>
  <url><loc>https://www.infosec.mn/blog/</loc><changefreq>daily</changefreq><priority>0.8</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=you-can-now-report-a-cyber-attack-through-e-mongolia-here-is-how-and-what-to-have-ready</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=apt29-turned-mongolian-government-websites-into-a-watering-hole-two-years-on-the-lesson-still-applies</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=gopherwhisper-a-china-aligned-group-used-slack-discord-and-outlook-to-spy-on-mongolian-government-systems</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=critical-information-infrastructure-in-mongolia-what-the-cyber-security-law-means-for-your-organisation</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=mongolias-draft-data-law-what-the-ministry-has-published-and-what-to-prepare-now</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=the-ncsc-expects-a-vulnerability-patch-wave-what-that-means-if-you-run-anything-internet-facing</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=the-eleven-controls-iso-270012022-added-and-where-implementations-fall-short</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=iso-270012022-control-57-threat-intelligence-what-it-actually-requires</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=pci-dss-scoping-why-the-cardholder-data-environment-is-almost-always-bigger-than-you-think</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=how-to-use-the-cisa-kev-catalog-inside-a-pci-dss-vulnerability-management-programme</loc><lastmod>2026-08-11</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=cve-2026-18577-n-able-n-centrals-incomplete-patch-and-the-third-party-risk-most-assessments-miss</loc><lastmod>2026-08-10</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=cve-2026-8037-and-cve-2025-68686-why-patching-your-fortinet-firewall-is-not-enough</loc><lastmod>2026-08-10</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=iso-270012022-statement-of-applicability-soa-a-practical-guide-to-selecting-and-excluding-controls</loc><lastmod>2026-02-25</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=why-every-mongolian-business-needs-pentest-2026</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=understanding-pci-dss-4-what-changed</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=top-5-cloud-security-mistakes-mongolian-companies</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
  <url><loc>https://www.infosec.mn/blog/post.html?slug=how-we-stopped-2m-ransomware-attack-mongolian-bank</loc><lastmod>2026-02-26</lastmod><changefreq>monthly</changefreq><priority>0.6</priority></url>
</urlset>