Cyber insurance: lack of evidence puts the policy at risk
Underwriters require reliable evidence of security controls. False statements about MFA, endpoint protection or backups can jeopardise coverage.
Section
Strategy & Governance
All articles
226 articles
NIS2 Patchwork: Four States Face EU Court
The EU Commission sues Ireland, Spain, France, and the Netherlands over incomplete NIS2 implementation. What this means for CISOs.
Weakest Supplier Opens Critical Facility
The KRITIS roof law makes supplier reliability a mandatory duty for operators. Governance roadmap to registration.
The concentration risk no supplier audit sees
Why single audits miss concentration risk and how a board steers concentration and fourth-party risk.
The AI Act Is Actually a Security Law
The AI Act is viewed by many as an ethics and compliance topic, a question of transparency and discrimination. For security teams, it is …
The Cyber Resilience Act Also Affects Your Installed Base
From September 11, 2026, a new obligation applies that many companies still underestimate. Anyone selling connected products in the EU must report actively exploited …
Südwestfalen IT: The Lesson of Municipal IT
Two years after the Southwestphalia IT attack, Security Today dissects: VPN without MFA, rebuilding without ransom, and five lessons for municipal IT.
When Attackers Are Faster Than the Patch
Between disclosure and exploitation of a vulnerability, only days often pass today. The State of Vulnerabilities Report 2026 reveals what matters now.
Five Line Items That Need Budget Before SIEM
Cybersecurity budget as risk financing: five key items a CISO should fund before investing in expensive tools-and how Section 30 of Germany’s BSIG…
WhatsApp in the Workplace: Which Messenger Will Replace It
Private WhatsApp use in companies is a compliance risk. Which criteria a business messenger must meet and which alternative truly works.
Older entries
Load older articles
articles: 226
