Zero Trust in banking: practical architecture for regulated environments
How to apply a Zero Trust architecture in banking step by step and why the never trust, always verify model fits with DORA and NIS2.
Cybersecurity
IT Security and Digital Privacy
Cybersecurity is no longer optional. In a world where identity dissolves among algorithms, it is a fundamental necessity. That is why here you will find practical guides on cybersecurity, data protection and digital privacy.
Understanding IT security goes beyond antivirus. It is about regaining sovereignty over your information. It also means making informed decisions in a constantly changing technological environment.
From risk management to data protection, we explore this discipline as a way of life —not just as a technical subject.
If your organisation is affected by the NIS2 directive or you need an executable strategic cybersecurity plan, that is your starting point.
-
-
ISO 22301 and business continuity: from the plan to the real drill
What ISO 22301 is, how to move from the business continuity plan to the real drill and how it relates to DORA and NIS2 in critical sectors.
-
Non-human identities: governing AI agents’ access
What non-human identities are, why AI agents drive up their number and how to govern their access to reduce security risk.
-
72-hour incident notification: GDPR, NIS2 and DORA compared
A comparison of the incident notification deadlines in GDPR, NIS2 and DORA and how to set up a single response process that meets all three frameworks.
-
Prompt injection in the enterprise: risks and defences in GenAI projects
What prompt injection is, how it affects generative AI applications in the enterprise and what layered defences to apply to mitigate the risk.
-
AI and cybersecurity consultancy in Almería for businesses
How I approach AI and cybersecurity consultancy in Almería for companies in regulated sectors, focusing on compliance, risk and deliverable IT projects.
-
Regulatory overlap of DORA, NIS2, ENS and the AI Act: comply without duplicating
How to manage the regulatory overlap between DORA, NIS2, GDPR, the EU AI Act and the ENS to comply once and demonstrate several, without duplicating effort or documentation.
-
The ENS (National Security Framework): a practical guide for IT projects
What the National Security Framework (ENS) is, who it obliges, its categories and how to face the audit without paralysing the project, explained by an AI Project Manager.
-
NIS2 penalties 2026: real cases and how to avoid them in IT projects
NIS2 penalties 2026: amounts, real cases, the most punished mistakes and a 90-day plan to reduce your organisation’s exposure to the national authority.
-
Secure enterprise RAG: architecture, data leaks and the EU AI Act
Secure enterprise RAG: reference architecture, data-leak risks and EU AI Act compliance. A practical guide to taking Retrieval Augmented Generation to production without surprises.
-
AI asset inventory: the discipline the AI Act postponement doesn’t change
The AI Omnibus postpones high risk to December 2027, but it does not postpone the AI asset inventory. How to build the living register and life cycle your compliance must close before August 2026.
-
Can AI fill the cyber-expert deficit in banking?
AI cybersecurity banking DORA: why AI does not fill the cyber-expert deficit, it shifts it. An analysis of the real limit under DORA.
