Guides & How-To
19 articles
Cyber risks in SMEs: Which actions come first?
A practical worksheet for cybersecurity priorities, accountable actions and verifiable outcomes.
Julian Köhn·
Security awareness: Does your team know what to do?
Beyond attendance: a 20-minute exercise to check whether your team can report suspicious messages and improve the process.
Julian Köhn·
Refrigeration cyberattack: Which dependencies put your operations at risk?
The attack on French refrigeration systems highlights an operational risk. Connect critical assets, suppliers, business impact analysis and verifiable actions.
Julian Köhn·
AI agents at work: Who can act, and who stays accountable?
AI agents do more than read. Define access, approvals and ownership, then make their risks and safeguards traceable in your existing ISMS.
Julian Köhn·
ISO/IEC 27090: bringing AI security risks into your ISMS
Understand the scope of ISO/IEC 27090 and connect AI applications, suppliers and data risks to practical work in your existing ISMS.
Julian Köhn·
Vendor assessment: criteria, weighting and an Excel template
Assess vendors using relevant criteria, weighted responses and knockout conditions. Free Excel template with instructions and a worked example.
Julian Köhn·
Germany's NIS2 rules: group IT, MSPs and negligible activities
When group IT qualifies as an MSP, how Germany's BSI interprets negligible activities and why a small IT subsidiary is not automatically exempt from NIS2.
Julian Köhn·
Create a risk matrix: Excel template and worked example
Build an information-security risk matrix. Free Excel template with dynamic matrices, a risk register and initial and residual risk examples.
Julian Köhn·
ISO 27001 Checklist: Step by Step to Certification
ISO 27001 checklist with about 30 checkpoints for certification and ISMS setup, every step explained, free PDF download.
Julian Köhn·
Choosing ISMS Software: Requirements Catalog & Checklist
Choosing ISMS software: requirements catalog with about 30 criteria, must-have vs nice-to-have, and a free checklist download.
Julian Köhn·
ISMS Software: Which One Helps with ISO 27001, TISAX and NIS2?
ISMS software compared: selection criteria, features and costs for ISO 27001, TISAX and NIS2. The practical guide for your decision.
Julian Köhn·
ISO 27001 Certification Explained Simply: Process & Costs
What ISO 27001 certification means, who actually needs it, and how the process runs from Stage 1 to recertification, explained clearly for beginners.
Julian Köhn·
GDPR Subject Access Request: How to Answer a DSAR Lawfully
A DSAR (Data Subject Access Request) under Art. 15 GDPR must be answered within 30 days. We walk you through the 8-step workflow from identity verification to data extraction and redaction, and which grounds for refusal are legally defensible.
Julian Köhn·
What Is an ISMS? Definition, Examples and Implementation Guide
What an ISMS is, which documents you need and how to build it: a clear definition, three examples and a practical implementation plan.
Julian Köhn·
5 Benefits of Automated Risk Analysis for Mid-Sized Companies
Learn how automated risk analysis helps SMEs detect risks early, ensure compliance and improve decision-making.
Julian Köhn·
Incident Management for SMEs: What, How & Who Helps
An SME guide to what incident management is, how to implement it, plus tools, reporting obligations, and risk management with Kopexa.
TISAX Roadmap for SMEs in the Automotive Industry
Achieve the highest information security standards with TISAX certification. Your path to greater trust and competitive advantage!
Certification Roadmap: ISO 9001 to 27001
Certification roadmap for ISO standards: Start with ISO 9001, leverage synergies with ISO 14001/27001. Reduce implementation time by 50% and save costs.
Julian Köhn·
ISO 27001 vs. TISAX: Differences, Requirements and Costs
ISO 27001 or TISAX? Compare requirements, assessment levels and costs. Build on your existing ISMS and plan the next steps without duplicating work.