Practical, step-by-step guidance and operational playbooks for European compliance and security teams, with extra attention for Belgium, the Netherlands and Luxembourg.
Security logging and monitoring (SIEM, SOC, MDR) as evidence
A practical guide to security logging, SIEM and SOC or MDR services: what to log, retention, detection use cases, alert triage and how to show supervisors…
Read article →Cyberbeveiligingswet (Cbw): a step-by-step compliance guide
The Cbw and the Cyberbeveiligingsbesluit have applied since 15 August 2026. This guide takes you from scoping and NCSC registration to the zorgplicht, meldplicht and board…
Read article →Cyber Resilience Act step by step: readiness for manufacturers
A practical CRA readiness path for manufacturers: confirm scope and classification, close Annex I gaps, run vulnerability handling and reporting, and plan conformity assessment and CE…
Read article →One incident, four clocks: NIS2, DORA, CRA and GDPR reporting
A single cyber incident can trigger four reporting clocks. This playbook compares the deadlines, walks you through classification and lists the Belgian, Dutch and Luxembourg recipients.
Read article →NIS2 in Belgium: a step-by-step compliance guide
A practical route through the Belgian NIS2 Law: confirm scope, register with the CCB, choose a CyFun level or ISO/IEC 27001, report incidents and pass the…
Read article →Cyber tabletop exercise playbook: plan, run and evidence it
A step-by-step playbook to plan, facilitate and evaluate a cyber tabletop exercise, and turn the after-action report into evidence for NIS2, DORA and CyFun.
Read article →NIS2 scope check: are you an essential or important entity?
A documented, step-by-step scope decision for NIS2: sector mapping, size-cap and group counting, size-independent rules, essential or important, jurisdiction, and where to register in the Benelux.
Read article →Incident response playbook aligned to NIST SP 800-61r3 and NIS2
A practical incident response playbook built on NIST SP 800-61r3 and NIS2, with roles, a severity matrix, evidence rules and a clear path from detection to…
Read article →Ransomware response playbook: the first hour, 24 hours and 72 hours
A timed ransomware playbook: what to do in the first hour, the first 24 hours and the first 72 hours, from isolation and evidence to reporting,…
Read article →DORA step by step for financial entities in the Benelux
A practical DORA path for banks, insurers, payment institutions and asset managers in Belgium, the Netherlands and Luxembourg, from ICT risk governance to major incident reporting.
Read article →