What we observe in the field, turned into useful guidance for IT and security leaders.
The first certifiable AI management system standard, ISO/IEC 42001 widens the question of risk: beyond what the organisation stands to lose, it asks what its systems may inflict. Actual requirements, and how it fits with ISO 27001 and the GDPR.
Read the articleAn RTO negotiated in a meeting remains an intention until the first timed drill. What separates the plan from reality: restore arithmetic, backup immutability, forgotten dependencies, and the drill as the only admissible proof.
Read the articleCollecting logs solves a storage problem; detecting an attack takes a good deal more. What SOC, MDR and EPP actually cover, which metrics deserve a place in the contract, and the questions that reveal what an MSSP offer really is.
Read the articleThe NIS2 directive does not apply in Morocco, yet it makes your European clients accountable for your security posture. A look at the real scope, how it interacts with Morocco’s law 09-08, and which work to start first.
Read the articleDescribe your situation in a few lines. We come back within one business day with an initial read and the questions that matter.
