Compliance

“How much does a security audit cost?” – I hear that question almost as often as “Do we even need one?”. The honest answer upfront: There is no serious fixed price – and that is a good thing. Here is why audit effort varies so much, how prices actually form, and what a good offer looks like. What drives the effort of an audit A security audit is not a standard product. Four factors decide how much work goes into it: ...

“Does NIS2 apply to us?” — lately I hear this question from almost every mid-sized company in my region. Understandable: the directive covers far more businesses than its predecessor, and the uncertainty about what exactly applies is huge. The good news: whether you’re probably in scope can be narrowed down with three questions. That’s what this article is about. What NIS2 is — and where Germany stands now The NIS2 Directive ((EU) 2022/2555) is the successor to the first NIS Directive and requires member states to make cybersecurity mandatory for essential and important entities. At its core: organised risk management, reporting of significant incidents, and management responsibility. ...