19–27 of 54 articles
By publication date
Refrigeration cyberattack: Which dependencies put your operations at risk?
The attack on French refrigeration systems highlights an operational risk. Connect critical assets, suppliers, business impact analysis and verifiable actions.

AI agents at work: Who can act, and who stays accountable?
AI agents do more than read. Define access, approvals and ownership, then make their risks and safeguards traceable in your existing ISMS.

ISO/IEC 27090: bringing AI security risks into your ISMS
Understand the scope of ISO/IEC 27090 and connect AI applications, suppliers and data risks to practical work in your existing ISMS.

Vendor assessment: criteria, weighting and an Excel template
Assess vendors using relevant criteria, weighted responses and knockout conditions. Free Excel template with instructions and a worked example.

Germany's NIS2 rules: group IT, MSPs and negligible activities
When group IT qualifies as an MSP, how Germany's BSI interprets negligible activities and why a small IT subsidiary is not automatically exempt from NIS2.

Create a risk matrix: Excel template and worked example
Build an information-security risk matrix. Free Excel template with dynamic matrices, a risk register and initial and residual risk examples.

ISO 27001 Checklist: Step by Step to Certification
ISO 27001 checklist with about 30 checkpoints for certification and ISMS setup, every step explained, free PDF download.

Choosing ISMS Software: Requirements Catalog & Checklist
Choosing ISMS software: requirements catalog with about 30 criteria, must-have vs nice-to-have, and a free checklist download.

ISMS Software: Which One Helps with ISO 27001, TISAX and NIS2?
ISMS software compared: selection criteria, features and costs for ISO 27001, TISAX and NIS2. The practical guide for your decision.