News
Short, practical notes on what changes in EU cyber and compliance regulation — and what it means for the documents you keep on file.
Three of the AI Act's five dates have already passed, and 2 August 2026 switches on the bulk of the regulation. Here is what is enforceable today and what lands next.
The 24-hour early warning is deliberately low-bar, but many teams still get it wrong the first time. Here are the mistakes to avoid.
NIS2 doesn't just ask your board to approve a policy once — it requires ongoing oversight and training. Here's what that actually looks like.
NIS2 is a directive, not a regulation — so the exact rules depend on how your country transposed it. Here's what that means for your compliance timeline.
