AI & Cybersecurity
Deploy AI you can defend, and defend with AI.
Legal
Insights
Written from engagements rather than from press releases. No vendor content, no predictions, and no article that ends by recommending a product.
5 min read
Since 11 September 2026, manufacturers of products with digital elements must report actively exploited vulnerabilities to ENISA within 24 hours. The duty arrived fifteen months before the rest of the regulation, and almost nobody has wired the path.
5 min read
Certification is a project with an end date. Maintaining it is not. The difference between a cheap certificate and an expensive one is whether the evidence collects itself.
5 min read
Most companies are deployers, not providers, and the obligations are far lighter than they fear. Here is the month of work that settles the question.
5 min read
The register is the first thing supervisors ask for and the easiest thing to get wrong. Ten failures we keep finding, and what each one costs to fix.
5 min read
Not the directive, the checklist. What an essential or important entity of around two hundred people is actually expected to hold, and the order we would build it in.
If this describes a problem you are currently in, forty-five minutes on a call is usually faster than another article.