Loading…
Blog
What changed at vendors and regulators, and what it means for your documentation.
20 September 2026
The German NIS2 clocks a consultant has to trackBSIG 2025 registration, change and incident deadlines with their section numbers, and the order to put them in place for a German client.
20 September 2026
What to tell a client with an Irish entity about NIS2Ireland has not transposed NIS2, so there are no national duties yet — what is live instead, what to do meanwhile, and what not to put in a memo.
20 September 2026
The Dutch Cyberbeveiligingswet is in force: what to check nowThe Netherlands' NIS2 law applies from 15 August 2026 — who is essential by law, how group size counts, and how registration and reporting actually run.
20 September 2026
NIS2 registration deadlines differ by country. The clocks do not.A country-by-country table of NIS2 status, registration duties and the three reporting clocks, and what a multi-country client should do about the gaps.
20 September 2026
The brand is not the counterpartyA subprocessor annex naming Heroku or SendGrid names a product, not the legal person your client contracts with, and often not the right country either.
20 September 2026
What the Digital Omnibus moved, and which notes to re-dateThe amending regulation, the dates as they now stand, and the client files worth re-dating before you send the next round of letters.
20 September 2026
When a vendor has no public data processing agreementWhat to ask for, what a customer-specific DPA changes about the annex, and how to record "asked, no response" so the file stays honest.
20 September 2026
An answer needs a state: confirmed, to check, or gapA bare "yes, it's encrypted" cannot be defended a year later. A fact with a state, an owner and an expiry date can.
20 September 2026
A vendor changed its entity: which documents are now wrongOne contracting entity moves and the blast radius runs through four document types, every client using that vendor, and whatever you already sent out.
Enter your website. Free, no sign-up, the report in about a minute.