Security logging and monitoring (SIEM, SOC, MDR) as evidence
A practical guide to security logging, SIEM and SOC or MDR services: what to log, retention, detection use cases, alert triage and how to show supervisors that detection works.
One incident, four clocks: NIS2, DORA, CRA and GDPR reporting
A single cyber incident can trigger four reporting clocks. This playbook compares the deadlines, walks you through classification and lists the Belgian, Dutch and Luxembourg recipients.
Cyber tabletop exercise playbook: plan, run and evidence it
A step-by-step playbook to plan, facilitate and evaluate a cyber tabletop exercise, and turn the after-action report into evidence for NIS2, DORA and CyFun.
Third-party risk management in 2026: from questionnaire fatigue to continuous assurance
Supplier questionnaires are multiplying while regulators ask for more than paperwork. Here is how to rebalance third-party risk management around concentration risk, continuous monitoring and published assurance.
DORA step by step for financial entities in the Benelux
A practical DORA path for banks, insurers, payment institutions and asset managers in Belgium, the Netherlands and Luxembourg, from ICT risk governance to major incident reporting.
