Indirectly in scope: when your customer sends the NIS2 questionnaire
You are not covered by NIS2, but your largest customer is. Then a questionnaire arrives. How to answer it without bending the truth.
Blog
From practice. For the real incident.
Articles on business continuity, NIS2 and exercises. Short, concrete and without scaremongering.
Tabletop exercise: half a day in the crisis team
No technology, no script to memorise. A table, a scenario and the people who decide in a real incident. This is how a tabletop exercise works.
NIS2: What management needs to know personally
NIS2 makes cyber security a board matter, quite literally. What management must approve, oversee and learn, and why delegating alone is not enough.
Five reasons continuity plans fail at the first outage
The plan is approved, the audit passed. Yet in a real incident nobody reaches for it. Five patterns I see again and again, and what helps.