Cyber Resilience Act: how to report vulnerabilities within 24 hours
The Cyber Resilience Act reporting obligation already applies: 24-hour early warning, 72-hour notification, and it covers products already on the market.
Cybersecurity
IT Security and Digital Privacy
Cybersecurity is no longer optional. In a world where identity dissolves among algorithms, it is a fundamental necessity. That is why here you will find practical guides on cybersecurity, data protection and digital privacy.
Understanding IT security goes beyond antivirus. It is about regaining sovereignty over your information. It also means making informed decisions in a constantly changing technological environment.
From risk management to data protection, we explore this discipline as a way of life —not just as a technical subject.
If your organisation is affected by the NIS2 directive or you need an executable strategic cybersecurity plan, that is your starting point.
-
-
How to implement ISO 27001: a practical step-by-step guide
A practical guide to implementing ISO 27001: from management commitment to certification, with the 93 Annex A controls and the most common mistakes.
-
Post-quantum cryptography in banking: why start now
Post-quantum cryptography in banking: the harvest now, decrypt later threat, cryptographic inventory, crypto-agility and how to plan the transition.
-
DORA TLPT: threat-led penetration testing in banking
DORA TLPT: what threat-led penetration testing is, how it differs from a pentest, how to prepare, the team involved and turning results into improvement.
-
NIS2 supply chain: how to assess your suppliers
NIS2 supply chain: what the directive requires on suppliers, how to assess them, security clauses, due diligence and governing third-party risk continuously.
-
Zero Trust in banking: practical architecture for regulated environments
How to apply a Zero Trust architecture in banking step by step and why the never trust, always verify model fits with DORA and NIS2.
-
ISO 22301 and business continuity: from the plan to the real drill
What ISO 22301 is, how to move from the business continuity plan to the real drill and how it relates to DORA and NIS2 in critical sectors.
-
Non-human identities: governing AI agents’ access
What non-human identities are, why AI agents drive up their number and how to govern their access to reduce security risk.
-
72-hour incident notification: GDPR, NIS2 and DORA compared
A comparison of the incident notification deadlines in GDPR, NIS2 and DORA and how to set up a single response process that meets all three frameworks.
-
Prompt injection in the enterprise: risks and defences in GenAI projects
What prompt injection is, how it affects generative AI applications in the enterprise and what layered defences to apply to mitigate the risk.
-
AI and cybersecurity consultancy in Almería for businesses
How I approach AI and cybersecurity consultancy in Almería for companies in regulated sectors, focusing on compliance, risk and deliverable IT projects.
-
Regulatory overlap of DORA, NIS2, ENS and the AI Act: comply without duplicating
How to manage the regulatory overlap between DORA, NIS2, GDPR, the EU AI Act and the ENS to comply once and demonstrate several, without duplicating effort or documentation.
