<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>FeldmannCyber — Insights &amp; Guides</title>
  <link>https://feldmanncyber.com/</link>
  <description>From Noise to Choice: ISMS, ISO 27001, compliance and AI governance.</description>
  <language>en</language>
  <atom:link href="https://feldmanncyber.com/rss.xml" rel="self" type="application/rss+xml"/>
  <item>
    <title>What should an incident response plan contain?</title>
    <link>https://feldmanncyber.com/resources/guides/incident-response-plan/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/incident-response-plan/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>What an incident response plan must contain: roles, escalation, communication, NIS2 and CRA reporting deadlines, evidence and lessons learned.</description>
  </item>
  <item>
    <title>What happens after ISO 27001 certification? ISMS maintenance explained</title>
    <link>https://feldmanncyber.com/resources/guides/isms-after-certification/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/isms-after-certification/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>Certification is not the finish line. What ISMS maintenance involves, which activities recur every year, and how to avoid the pre-audit panic.</description>
  </item>
  <item>
    <title>Can an ISO 27001 ISMS use your existing tools?</title>
    <link>https://feldmanncyber.com/resources/guides/isms-with-existing-tools/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/isms-with-existing-tools/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>Can an ISO 27001 ISMS use your existing tools? Yes — how wikis, document management, ticketing and project tools can carry large parts of it.</description>
  </item>
  <item>
    <title>How do you implement ISO 27001? A realistic step-by-step guide</title>
    <link>https://feldmanncyber.com/resources/guides/iso-27001-implementation/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/iso-27001-implementation/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>How to implement ISO 27001 step by step: scope, gap analysis, risk assessment, SoA, measures, internal audit and certification — realistically explained.</description>
  </item>
  <item>
    <title>ISO 42001 and the EU AI Act: what they require and how they relate to ISO 27001</title>
    <link>https://feldmanncyber.com/resources/guides/iso-42001-and-eu-ai-act/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/iso-42001-and-eu-ai-act/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>What AI governance means, what ISO/IEC 42001 is, what the EU AI Act requires after the 2026 Digital Omnibus amendment, and how both connect to an existing ISMS.</description>
  </item>
  <item>
    <title>Can ISO 9001 and ISO 27001 be combined? Integrated management systems explained</title>
    <link>https://feldmanncyber.com/resources/guides/iso-9001-and-iso-27001/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/iso-9001-and-iso-27001/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>What ISO 9001 and ISO/IEC 27001 have in common, which processes an integrated management system (IMS) can share, and what remains specific to each standard.</description>
  </item>
  <item>
    <title>NIS2, Cyber Resilience Act and EU AI Act: an overview for companies</title>
    <link>https://feldmanncyber.com/resources/guides/nis2-cra-ai-act-overview/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/nis2-cra-ai-act-overview/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>NIS2, the Cyber Resilience Act and the EU AI Act explained: who is affected, which 2026 deadlines apply and how one ISMS covers shared requirements.</description>
  </item>
  <item>
    <title>What is an ISMS? Information security management explained simply</title>
    <link>https://feldmanncyber.com/resources/guides/what-is-an-isms/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/guides/what-is-an-isms/</guid>
    <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    <description>What an information security management system (ISMS) is, what it consists of, how it relates to ISO/IEC 27001 — and why it is more than a set of documents.</description>
  </item>
  <item>
    <title>Funding in Hesse: how to scope digital and cybersecurity projects correctly</title>
    <link>https://feldmanncyber.com/resources/insights/funding-hesse-scope-digital-cybersecurity-projects/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/insights/funding-hesse-scope-digital-cybersecurity-projects/</guid>
    <pubDate>Mon, 09 Feb 2026 00:00:00 GMT</pubDate>
    <description>Funding for digital and cybersecurity projects in Hesse: Distr@l, RKW consulting grants, DIGI grant, push!, Prototype Fund and the de minimis rule.</description>
  </item>
  <item>
    <title>Recap: IT Managers Meeting at IHK Darmstadt — security monitoring along the Cyber Kill Chain</title>
    <link>https://feldmanncyber.com/resources/insights/it-managers-meeting-darmstadt-cyber-security-monitoring/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/insights/it-managers-meeting-darmstadt-cyber-security-monitoring/</guid>
    <pubDate>Thu, 29 Jan 2026 00:00:00 GMT</pubDate>
    <description>Recap of the IHK Darmstadt IT managers meeting: FeldmannCyber on IT security monitoring along the Cyber Kill Chain — scans, monitoring and SIEM.</description>
  </item>
  <item>
    <title>Quishing: German armed forces warn of QR code scam at the start of new military service</title>
    <link>https://feldmanncyber.com/resources/insights/bundeswehr-qr-code-scam-conscription/</link>
    <guid isPermaLink="true">https://feldmanncyber.com/resources/insights/bundeswehr-qr-code-scam-conscription/</guid>
    <pubDate>Tue, 20 Jan 2026 00:00:00 GMT</pubDate>
    <description>Fake official letters with manipulated QR codes target young adults in Germany. How quishing works, how to recognize fakes and what to do if you suspect fraud.</description>
  </item>
</channel>
</rss>
