Guides (8)
Fundamentals explained clearly: what is an ISMS, how does ISO 27001 work, what does NIS2 mean?
Resources
Knowledge that creates clarity
Guides, insights, videos and white papers on management systems, cybersecurity and compliance — written to be understood.
Insights (3)
Analysis, event recaps and practical knowledge from our work.
Videos
Videos and Shorts — each with summary and transcript.
White papers
In-depth documents on core topics.
Latest content
What should an incident response plan contain?
What an incident response plan must contain: roles, escalation, communication, NIS2 and CRA reporting deadlines, evidence and lessons learned.
What happens after ISO 27001 certification? ISMS maintenance explained
Certification is not the finish line. What ISMS maintenance involves, which activities recur every year, and how to avoid the pre-audit panic.
Can an ISO 27001 ISMS use your existing tools?
Can an ISO 27001 ISMS use your existing tools? Yes — how wikis, document management, ticketing and project tools can carry large parts of it.
How do you implement ISO 27001? A realistic step-by-step guide
How to implement ISO 27001 step by step: scope, gap analysis, risk assessment, SoA, measures, internal audit and certification — realistically explained.
ISO 42001 and the EU AI Act: what they require and how they relate to ISO 27001
What AI governance means, what ISO/IEC 42001 is, what the EU AI Act requires after the 2026 Digital Omnibus amendment, and how both connect to an existing ISMS.
Can ISO 9001 and ISO 27001 be combined? Integrated management systems explained
What ISO 9001 and ISO/IEC 27001 have in common, which processes an integrated management system (IMS) can share, and what remains specific to each standard.
NIS2, Cyber Resilience Act and EU AI Act: an overview for companies
NIS2, the Cyber Resilience Act and the EU AI Act explained: who is affected, which 2026 deadlines apply and how one ISMS covers shared requirements.
What is an ISMS? Information security management explained simply
What an information security management system (ISMS) is, what it consists of, how it relates to ISO/IEC 27001 — and why it is more than a set of documents.
Funding in Hesse: how to scope digital and cybersecurity projects correctly
Funding for digital and cybersecurity projects in Hesse: Distr@l, RKW consulting grants, DIGI grant, push!, Prototype Fund and the de minimis rule.
A question not answered here?
Ask us directly — it often becomes our next guide.