NIS2 for the security officer
Directive (EU) 2022/2555 in one pass: the scope test, the obligations by article, the reporting clock, the fine ceilings and a mapping to ISO 27001 Annex A.
Compliance3 Sept 20269 min read
Briefings
What the regulation actually requires.
Short explainers on the instruments that land in scope: the obligation, the evidence an auditor asks for, and the readings of the text that turn into findings.
Track
Framework
3 of 3
ECE R155 vs ISO 21434: Five Common Misreads That Get Caught in Audit
R155 mandates the framework; ISO 21434 describes how to build it. Treating them as interchangeable is where most first-time audits go sideways.
Compliance10 Jul 20265 min read
Product & OT
The 90-day SOC 2 Type 1 plan
A week-by-week sequence for a first SOC 2 type 1 examination: scope, policy set, evidence pipeline, risk assessment, fieldwork.
Compliance10 Jul 20268 min read
SaaS