Skip to main content
Contact Us
NIS2,
Compliance

NIS2 Article 21 Compliance: When the Control Exists but the Evidence Doesn't

V. Garbar
by V. Garbar
on 23 Sep, 2026

The policy says privileged access is reviewed every quarter. Security says the review happened. IT has a ticket. The owner remembers approving something. The evidence is apparently "somewhere in ...

Read More
18 Sep, 2026 • 11 min read
PCI DSS compliance solutions including consultants, software, assessors, and security service providers
PCI DSS consultants, software, and service providers: Pick the wrong one, and you still own the mess
By V. Garbar
10 Sep, 2026 • 8 min read
Third-party risk management framework for documenting ICT suppliers under NIS2 and DORA
Building a third-party risk management framework for NIS2 and DORA
By V. Garbar
10 Sep, 2026 • 7 min read
Incident reporting process for NIS2, DORA, and GDPR compliance
Incident reporting for cybersecurity: What security teams need to document
By V. Garbar
10 Sep, 2026 • 6 min read
How to conduct a supplier risk assessment under NIS2 Article 21 — supplier questionnaire, risk scoring matrix, and vendor prioritisation by business impact.
How to Conduct a Supplier Risk Assessment Under NIS2
By V. Garbar
10 Sep, 2026 • 6 min read
DORA compliance requirements for classifying ICT incidents consistently — severity assessment, reporting decisions, and audit-ready documentation for financial institutions.
DORA Compliance Requirements: How to Classify ICT Incidents Consistently
By V. Garbar
10 Sep, 2026 • 8 min read
The MyDr breach — what security leaders in Poland should take from the incident.
The MyDr Breach: What Security Leaders in Poland Should Take From It
By V. Garbar
09 Sep, 2026 • 8 min read
What auditors request from your managed SIEM provider — NIS2 and DORA evidence requirements.
What auditors request from your managed SIEM: NIS2 and DORA evidence requirements
By V. Garbar
09 Sep, 2026 • 7 min read
NIS2 enforcement tracker — country-by-country status and the first fines issued under the directive.
NIS2 enforcement has started. Here is where your country stands and what the first fines tell us.
By V. Garbar
09 Sep, 2026 • 4 min read
Outsourced SOC: The Complete Guide to SOC-as-a-Service for Mid-Sized Organizations
Outsourced SOC: The Complete Guide to SOC-as-a-Service for Mid-Sized Organizations
By V. Garbar