Editor's Picks
Discover Categories
Latest Articles
Password Policy in 2026: What NIST SP 800-63B Recommends
NIST SP 800-63B-4 is final: 15-character minimum, no forced rotation, no composition rules, blocklists and phishing-resistant MFA. Sample policy included.
How to Run a Cyber Tabletop Exercise: Ransomware Scenario
Plan and run a cyber tabletop exercise: roles, timeline, a full ransomware scenario with injects, NIS2 and GDPR reporting decisions,…
30-Day Security Awareness Training Plan
A ready-to-use 30-day security awareness training plan: four weekly themes, daily 5–10 minute activities, kickoff and wrap-up templates, and simple…
SOC 2 vs ISO 27001: Which Do You Need?
SOC 2 vs ISO 27001 compared: Trust Services Criteria, Type I vs Type II, attestation vs certification, US vs EU…
How to Run a Phishing Simulation Program
Run phishing simulations that build reporting habits, not fear: goals, ethical lures, difficulty levels, metrics, and GDPR and Italian labour-law…
NIS2 vs DORA vs GDPR: Which Applies to You?
NIS2, DORA and GDPR compared: scope, regulators, incident reporting clocks, fines and board duties, plus how to build one control…
Building a Security Awareness Program That Works
Annual slideware doesn't change behaviour. Build a security awareness program with role-based training, NIS2 and ISO 27001 links and a…
