Insights
Regulation and technology, clearly explained.
NIS2, DORA, ISMS, EU AI Act: what applies, to whom and from when – and how to implement it pragmatically. Drawing on more than 900 projects since 2012, written by consultants who put these topics into practice with clients every day.
NIS2: Is my company in scope? A five-step check
NIS2 in Germany: sector, size, category, registration with the BSI and management obligations – the scope check in five steps.
Read more Cybersecurity · NIS2 internationalNIS2 in a European group: steering national subsidiaries with a Group CISO
NIS2 applies in every EU country under its own national law. How groups steer their national subsidiaries with a Group CISO, a common framework and monitoring.
Read more Cybersecurity · DORADORA for ICT service providers: what financial clients now require of you
DORA has applied since 17 January 2025. What banks and insurers require of IT service providers: register of information, contract content, testing, exit strategy.
Read more AI · Law & practiceAI in the company: what the EU AI Act requires in 2026 – and when your own AI makes sense
The EU AI Act after the 2026 Omnibus: which deadlines apply, what companies need to do now and when local AI on your own servers is the better choice.
Read more Cybersecurity · ISMSISO 27001 or BSI IT-Grundschutz? The right framework for your ISMS
ISO/IEC 27001 or BSI IT-Grundschutz: differences, effort, certification and which framework suits which company – with an eye on NIS2.
Read moreYour question isn't covered?
An initial call is free and without obligation. You describe the situation, and we tell you honestly whether and how we can help.