Risk management
Assessing and treating cyber risk: methods, documents and choices that hold up in an audit.
All articles
NIS 2 assessment: a self-assessment checklist for SMEs
Your company has just found out it falls under NIS 2. A self-assessment to run before an ACN review or an external audit: confirm scope, find the mea…
NIS Reinforced Security Measures: ACN Opens the Consultation
On 18 September 2026 ACN opened a sector consultation on reinforced NIS security measures, meant to supplement and replace the baseline measures. The…
NIS 2 Supply-Chain Security: Managing Critical Suppliers and High-Impact Procurements
NIS 2 supply-chain security is a governance obligation covering supplier identification, risk assessment, contractual integration, and lifecycle moni…
NIS 2 Identification Controls (ID): Inventories, Risk Assessment, and Improvement Cycle
The NIS 2 Identification (ID) domain covers asset visibility, risk assessment, treatment planning, vulnerability processes, and improvement cycles. P…
NIS 2 risk treatment plan: practical guide for ID.RA-06 approval
The risk treatment plan is mandatory under NIS 2 Appendix C (ID.RA-06). This guide covers what an approvable plan must show, a practical structure wi…
NIS 2 risk assessment document for systems and networks: practical guide for ID.RA-05 approval
The risk assessment of information and network systems is mandatory under NIS 2 Appendix C (ID.RA-05). This guide covers what an approvable assessmen…
NIS 2 Article 24 in Practice: How to Implement Cybersecurity Risk-Management Measures
Article 24 of Italy's NIS decree requires proportionate cybersecurity measures. Practical guide to implementing control families (GV/ID/PR/DE/RS/RC) …
NIS 2 operational templates for GRC teams: what to prepare and why it matters
NIS baseline guidance identifies a concrete documentation set required for governance approval. This guide maps the Appendix C template set, explains…
Cybersecurity Update - Week 22 of 2025
Aegister's weekly cybersecurity update for Week 22 of 2025, covering major threats, trends, regulatory changes (NIS 2, DORA), GRC topics, and interna…
Understanding NIS 2: A Comprehensive Guide to the New EU Cybersecurity Directive
Master the NIS 2 Directive with our comprehensive guide covering implementation strategies, compliance requirements, and practical steps for strength…
Understanding Threat Intelligence: What Every Business Should Know
Explore the fundamentals of threat intelligence and its importance in proactive cybersecurity strategies.
Cyber Threats 2025: The Most Common Attacks and How to Defend Against Them
An in-depth look at the most common cyber threats in 2025 from ransomware to supply chain attacks and how organizations can defend themselves using s…