Insights

Practical compliance and security guidance for SMEs, organised by subject.

NIS2 & Cyberbeveiligingswet

What the Cyberbeveiligingswet means for Dutch SMEs: scope, mandatory registration at mijn.ncsc.nl, 24-hour incident reporting, director liability, and supply-chain obligations.

What the EU AI Act means for SMEs using or building AI systems: risk classification, prohibited practices, obligations for providers and deployers, and how it intersects with the ISO 27001 and NIS2 compliance work already underway.

ISO 27001

Practical guidance on ISO 27001:2022, covering clauses 4 to 10, the Annex A controls, certification readiness, internal audit and management review.

ISO 42001

ISO/IEC 42001 is the international standard for an AI management system (AIMS): governance, risk management, and lifecycle controls for organizations developing or using AI responsibly, and how it complements an existing ISO 27001 ISMS.

GDPR & Privacy

GDPR (AVG) compliance for European SMEs: DPIAs, processor agreements, retention schedules, breach notification and the Dutch reporting duties.

Microsoft 365 as your ISMS

M365 Business Premium as the compliance backbone for SMBs: turn the Microsoft 365 licences you already pay for into ISO 27001 and NIS2 control evidence with Entra ID, Intune, Defender, Purview and the automation that closes the gaps.

Templates & Tools

Free, ready-to-use templates and reference material: SoA templates, risk registers, policy packs, gap-assessment checklists, and plain-language definitions of common security terms.