Information Security

Articles on Information Security from ADVISORI

EBA Draft RTS on Operational Risk Management Framework: What Article 323 CRR Now Requires of Institutions

Published on 26 August 2026 as EBA/CP/2026/18, the EBA draft RTS on operational risk management framework converts long-standing supervisory expectation into binding minimum requirements under Article 323(2) CRR. This article works through governance, the management process and the assessment system, and shows how much of the work turns on a single figure: the EUR 750 million business indicator threshold.

Dr. Helge Thiele

September 16, 2026

18 min read

Information Security

The CRA Single Reporting Platform (SRP): status, registration and what to prepare

The Single Reporting Platform (SRP) is how manufacturers report under the Cyber Resilience Act from 11 September 2026. Till now it is not live, there is no API, and cross-border sharing is manual. What you can prepare regardless.

Boris Friedrich

August 31, 2026

13 min read

Information Security

ECB requires action plan on AI-enabled cyber threats by 31 October 2026

ECB Banking Supervision requires all significant institutions to submit an action plan addressing AI-enabled cyber threats by 31 October 2026. What letter SSM-2026-0301 demands, and how the six focus areas map onto DORA.

Phil Hansen

July 10, 2026

7 min read

Information Security

Cyber Insurance: Requirements, Costs, and Selection Guide for Businesses 2026

Cyber insurance covers financial losses from cyberattacks, data breaches, and IT outages. This guide explains what insurers require in 2026, coverage types, costs by company size, and how to choose the right policy — including how ISO 27001 certification reduces premiums.

Boris Friedrich

April 17, 2026

12 min read

Information Security

Vulnerability Management: The Complete Lifecycle for Finding, Prioritizing, and Remediating Weaknesses

Over 30,000 CVEs are published annually. Effective vulnerability management prioritizes what matters most to your organization and remediates before attackers exploit. This guide covers the full lifecycle: discovery, scanning, risk-based prioritization, remediation, and compliance.

Boris Friedrich

April 16, 2026

14 min read

Information Security

Security Awareness Training: Building Effective Programs and Measuring Impact

The human layer remains the weakest link in cybersecurity. This guide covers how to build an effective security awareness program, run phishing simulations, design role-based training, and measure whether your program actually reduces risk — with benchmarks and KPIs.

Boris Friedrich

April 15, 2026

12 min read

Information Security

Penetration Testing: Methods, Process & Provider Selection Guide 2026

Penetration testing reveals vulnerabilities before attackers exploit them. This comprehensive guide covers black box, grey box, and white box methods, the 5-phase pentest process, provider selection criteria, DORA TLPT requirements, and cost benchmarks for every test type.

Boris Friedrich

April 15, 2026

14 min read

Information Security

Business Continuity Software: Comparing Leading BCM Platforms 2026

Business continuity software automates BIA, plan management, exercise tracking, and incident response. This comparison reviews leading BCM platforms, selection criteria, DORA alignment, and which solution fits organizations at different maturity levels.

Boris Friedrich

April 14, 2026

18 min read

Information Security

SOC 2 vs. ISO 27001: Which Security Certification Do You Need?

SOC 2 and ISO 27001 are the most requested security certifications. This practical comparison covers scope, cost, timeline, customer expectations, regulatory alignment, and the 70% control overlap — helping you decide which to pursue (or whether you need both).

Boris Friedrich

April 14, 2026

16 min read

Information Security

IT Security Concept: Template and Practical Guide for SMEs

An IT security concept is the foundational document for your organization’s information security. This practical guide provides a template and step-by-step instructions for SMEs to create their first security concept — aligned with BSI Grundschutz and ISO 27001.

Boris Friedrich

April 10, 2026

12 min read

Information Security

NIS2 for Mid-Sized Companies: A Practical Compliance Guide 2026

NIS2 expanded cybersecurity regulation to 160,000 EU entities, including many mid-sized companies with no prior regulatory experience. This practical guide covers who is affected, the 10 mandatory measures, incident reporting rules, management liability, and a cost-effective implementation roadmap.

Boris Friedrich

April 09, 2026

14 min read

Information Security

Business Impact Analysis (BIA): The Complete Guide for Organizations 2026

A Business Impact Analysis identifies your most critical business processes and quantifies the impact of their disruption. This practical guide covers the 7-step BIA methodology, RTO/RPO setting, dependency mapping, DORA requirements, data collection methods, and a ready-to-use BIA template.

Boris Friedrich

April 07, 2026

15 min read

Your strategic success starts here

Our clients trust our expertise in digital transformation, compliance, and risk management

Ready for the next step?

Schedule a strategic consultation with our experts now

30 Minutes • Non-binding • Immediately available

For optimal preparation of your strategy session:

Your strategic goals and challenges

Desired business outcomes and ROI expectations

Current compliance and risk situation

Stakeholders and decision-makers in the project

Prefer direct contact?

Direct hotline for decision-makers

Strategic inquiries via email

Detailed Project Inquiry

For complex inquiries or if you want to provide specific information in advance