Discover Categories

Latest Articles

NIS2 Management Training: What Boards Must Know

NIS2 Article 20 requires board members to take cybersecurity training. What it covers, how often to run it, how to…

Akash Kumar
13 Min Read

GDPR Breach Notification: The 72-Hour Rule

GDPR breach notification explained: when the 72-hour clock starts, what to report, when to tell data subjects, EDPB examples and…

Akash Kumar
15 Min Read

NIST CSF 2.0 Explained: Functions, Tiers, Profiles

NIST CSF 2.0 explained: the six functions including Govern, tiers, profiles, quick-start guides, and how to use it alongside ISO…

Akash Kumar
14 Min Read

DORA Explained: Digital Operational Resilience Act

DORA explained: who is in scope, the five pillars, incident reporting deadlines, TLPT, the register of information and practical first…

Akash Kumar
15 Min Read

ISO 27001:2022 Implementation Roadmap for SMEs

A phased ISO 27001:2022 roadmap for SMEs: clauses 4–10, the 93 Annex A controls, risk assessment, SoA, audits, certification and…

Akash Kumar
16 Min Read

NIS2 Compliance Checklist: Article 21 Evidence Guide

A practical NIS2 compliance checklist: each Article 21(2) measure from (a) to (j), the evidence auditors expect, plus reporting and…

Akash Kumar
14 Min Read

NIS2 Directive Explained: Scope, Duties and Fines

NIS2 explained in plain English: who is in scope, essential vs important entities, Article 21 measures, 24h/72h reporting, fines, and…

Akash Kumar
18 Min Read