Insights
Clear thinking on digital resilience
No scare stories, no jargon. Practical insights into what regulations such as NIS2, the AI Act and the GDPR mean for your organisation.
The titles below are provisional – if current events call for it, topics may shift.
Expected · September 2026
It’s 11 September. The Cyber Resilience Act’s reporting duty is active. What now?
Which products fall under the CRA, what you must report within 24 hours of an actively exploited vulnerability, and what this means for SMEs that supply software or connected devices.
Expected · October 2026
Certified for ISO 27001 – what does NIS2 still ask of you?
A practical walkthrough of what your ISO 27001 certificate already covers, and the concrete steps that come on top of it around governance, suppliers and incident reporting.
Why I publish
The Dutch cybersecurity conversation is rich in tools, panic and opinions. It’s poorer in clarity. I write about the topics where that gap is widest – and where I believe a sober, honest voice is missing.
That means: no marketing copy disguised as an article, no lists for the sake of lists, and no pieces that go nowhere. Every article ends with something you can do this week – or an honest answer as to why that isn’t possible yet.