01
10 July 2026 · 9 min read
EU AI content labelling rules before 2 August 2026
The EU approved a code for AI-generated content transparency. Learn what AI Act Article 50 requires from 2 August and how companies should prepare.
Topic · 7 articles
Governance and Compliance
Risk management, NIS2, DORA, GDPR and organisational practices that turn requirements into operating controls, ownership and measurable improvement.
FIELD NOTES
TOPIC INDEX
Latest research
02
7 July 2026 · 10 min read
External attack surface management: a practical guide
EASM discovers unknown domains, IPs, cloud and services. Build a repeatable process for discovery, ownership, risk prioritisation and remediation.
03
28 June 2026 · 12 min read
NIS2 in Poland: new obligations and 2026 deadlines
The amended KSC act implements NIS2 and applies from 3 April 2026. We explain who it covers, the deadlines and what you need to do.
04
31 May 2026 · 12 min read
DORA: what it really requires of financial firms
DORA has applied since January 2025 and covers far more than banks. The five pillars, mandatory resilience testing and ICT supplier duties.
05
21 May 2026 · 11 min read
Shadow IT: the apps IT doesn't know about
Employees use several times more applications than IT has approved. Where shadow IT comes from, what it risks and how to control it without bans.
06
26 April 2026 · 12 min read
GDPR in IT practice: technical security measures
'Appropriate technical measures' — but which exactly? GDPR Article 32 as an IT checklist: encryption, access, logs, backups and testing.
07
16 April 2026 · 12 min read
Small business cybersecurity: a 90-day plan
A small company doesn't need a security department to stop being an easy target. A 90-day plan: what to do in-house, what to buy, what to outsource.
BR / NEXT STEP
Want to prepare your team for these threats?
We turn current threats into role-based training, safe exercises and a clear reporting path. The free Academy remains available for self-directed learning.
NDA · clear scope · direct communication