Our blog

Resources and Insights

What changed in European compliance, what it requires, and what to do about it.

Blog categories

14' min read

What is GRC? Governance, Risk, and Compliance Explained

GRC stands for Governance, Risk, and Compliance. The GRC meaning goes beyond the acronym: it describes how organisations structure their internal rules, manage uncertainty, and meet external regulatory requirements, not as three separate workstreams, but as one connected approach.

Maurice Müller

31.07.2026

12' min read

What is NIS2? The EU cybersecurity directive, and what it means for your organization

NIS2 is the EU's updated directive on network and information security. It sets binding cybersecurity requirements for organizations across critical sectors in Europe, and since October 2024, it is in force.

Maurice Müller

31.07.26

Our tools

Access premium whitepapers, presentation decks, templates, interactive assessments, and everything else you need to scale

NIS2 guide

A step-by-step guide on how to master NIS2 compliance

NIS2 management checklist

Download this executive summary to understand your approval, oversight, and training obligations at a glance

NIS2 evidence plan

An effective NIS2 evidence plan turns legal requirements into an operational system that can be executed and demonstrated at any time

NIS2 whitepaper

How to achieve NIS2 compliance with the Formalize whitepaper

NIS2 policy template

Save time and ensure audit readiness with 12 customizable, regulation-aligned policy templates designed to adapt to any organization size or sector.

NIS2 stakeholder presentation

Present the case for NIS2 compliance with confidence

NIS2 gap self-assessment tool

Assess your organization's NIS2 readiness in minutes. Get your compliance score, spot risk gaps, and receive actionable next steps.

NIS2 controls

A list of predefined NIS2 controls