<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://sarfarazchougule.com/</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/cybersecurity-board-reporting</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/privacy</loc><lastmod>2026-08-17</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/advisory</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/advisory/dpdp</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/director-ciso-personal-liability-cyber-breach</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/sec-8k-item-1-05-four-business-days</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/uk-cyber-governance-code-of-practice</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/eu-ai-act-high-risk-deadline-delayed</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/iso-42001-vs-eu-ai-act</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/board-oversight-agentic-ai</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/dpdp-act-foreign-companies-gcc</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/dpdp-breach-notification-72-hours</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/cmmc-phase-2-pause-what-still-applies</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/cmmc-level-2-poam-rules</loc><lastmod>2026-10-01</lastmod></url>
  <url><loc>https://sarfarazchougule.com/answers/cyber-metrics-board-should-see</loc><lastmod>2026-10-01</lastmod></url>
</urlset>