Compliance Blog: NIS2, DORA & GDPR

What a SOC 2 Report Proves, and What It Doesn't

Trust Services Criteria, Type 1 vs Type 2, and how to get audit-ready.

Maurice Müller

21.10.26

Policy Management: From Shared Drive to Audit Trail

The seven-step lifecycle, what makes it work, and when software helps.

Maurice Müller

20.10.26

Internal Audit Findings: How to Make Sure They Get Fixed

Five checks that make sure audit findings get closed, not forgotten.

Maurice Müller

12.10.26

GDPR Compliance Means Being Able to Prove It

The principles, a 10-step checklist, and what changes in 2026 and 2027.

Maurice Müller

07.10.26

News & Analysis

When an AI Agent Causes a Data Breach

Why incident response and AI governance can no longer run separately.

Alessia Gilardi

29.09.26

Data Governance: Who Decides What Happens to Your Data

Frameworks, functions, and the steps for putting data-related rules into daily practice.

Maurice Müller

29.09.26

Cyber Resilience Act: The New 24-Hour Reporting Rule

Who it applies to, what it covers, and how it overlaps with NIS2 and GDPR.

Àngela Vercher

28.09.26

DORA Regulation: What Still Needs Proving Now

The five pillars, the penalties, and what changed since the deadline.

Maurice Müller

24.09.26

News & Analysis

When Verification Fails: A GDPR Breach Case

The control that would have stopped it, and why most policies lack it.

Laura Santeusanio

23.09.26

What Is a DPIA? GDPR's Privacy Risk Assessment, Explained

Discover how to spot Article 35 triggers, the 7 steps, and what to include.

Maurice Müller

21.09.26

NIS2 in Italy: "Compliant on Paper" Won't Survive October

The 10 required measures, the fines, and how to close the gap in time.

Laura Santeusanio

18.09.26

Compliance Management Software: What to Look For

What the software does, the real benefits, and how to compare platforms.

Maurice Müller

16.09.26

What Is AI Risk Management?

Main risk types, the NIST framework, and a 6-step process to follow.

Maurice Müller

14.09.26

What Is a Risk Matrix? Scoring Explained

How likelihood and impact combine into a score, with a 5x5 example.

Maurice Müller

09.09.26

What Is Supplier Risk Management? A Practical Guide

How to assess, score, and monitor supplier risk, step by step.

Maurice Müller

04.09.26

Formalize Marketplace: How Blueprints Work

Partners co-build ready-to-deploy blueprints, so you skip the blank page.

Maurice Müller

02.09.26

Risk Management Frameworks: Types, Steps & Examples

NIST, ISO 31000, or COSO: compare the frameworks and pick one that fits.

Maurice Müller

01.09.26

NIS2 Requirements: Key Pillars & Checklist

What NIS2 actually requires, and how to check where your organization stands.

Maurice Müller

25.08.26

Your Controls Were Right. Are They Still?

AI that reads the actual ISO 27001 standard, not just summaries about it.

Maurice Müller

24.08.26

Stop Digging for Answers. Start Asking.

Your compliance records can finally answer questions, not just sit there.

Maurice Müller

24.08.26

Person typing on a laptop, with an overlay showing the three pillars of information security: confidentiality, integrity, and availability.

What is ISO 27001? ISMS Standard & Compliance Explained

ISO 27001 is the international standard for managing information security risk.

Maurice Müller

20.08.26

EU AI Act: What the Digital Omnibus changed, and what it means for your organisation

The EU AI Act's Digital Omnibus has extended key compliance deadlines for high-risk AI systems. The headline is easy to misread: this is not a pause. The obligations remain. The timeline shifted.

Maurice Müller

18.08.2026

Professional reviewing a GRC dashboard showing governance, risk, and compliance metrics.

What is GRC? Governance, Risk, and Compliance Explained

GRC stands for Governance, Risk, and Compliance. The GRC meaning goes beyond the acronym: it describes how organisations structure their internal rules, manage uncertainty, and meet external regulatory requirements, not as three separate workstreams, but as one connected approach.

Maurice Müller

31.07.2026

Team working in a meeting room, with a colleague holding a laptop in the foreground.