Conducting a risk analysis: methods and worked example
Conducting a risk analysis: what methods exist, which one fits your organization, a fully elaborated example, and what ISO 27001, NIS2, and DORA require.
-
-
ISAE 3402 costs: what determines the price of your report?
ISAE 3402 costs range from approximately 14,000 to over 100,000 euros. See which factors determine the price and what additional internal costs are involved.
-
NEN 7510 audit: requirements, documents, and the 5 biggest mistakes
How does a NEN 7510 audit proceed? What an auditor checks in phase 1 and 2, which documents you need, and the 5 mistakes healthcare organizations most often make.
-
NIS2: Is your board personally liable?
From August 15, 2026, the Cybersecurity Act (NIS2) will apply. What does this mean for your organization's director liability? You should arrange this now.
-
Creating a Risk Matrix: Explanation + Example (5x5 Likelihood-Impact Matrix)
Creating a risk matrix? Discover how to score likelihood and impact, see a filled-out 5x5 example, and avoid the most common mistakes. Explained practically.
-
ISO 27001 Checklist 2026: Main Clauses and 93 Annex A Controls
Complete ISO 27001 checklist for the 2022 version: main clauses 4-10 plus 93 Annex A controls in 4 themes, with NIS2 overlap and SME costs €8k-40k.
-
ISAE 3402 Gap Analysis: Action Plan, Costs, and Timeline for 2026
Complete ISAE 3402 Gap Analysis: 6-step plan, 60-200 controls in scope, costs 2026, and 4-8 month timeframe for Type I statement.
-
ISO 27001 Action Plan: From Baseline to Certification in 2026
Practical ISO 27001 Step-by-Step Plan in 10 Phases: From Baseline Measurement to Certification in 6 to 12 Months, via Risk Analysis and Statement of Applicability.
-
What we can learn from the Odido hack
Prevention is better than cure Cyber incidents like the ShinyHunters attack on Odido attract a lot of attention. Understandably so. In this attack, cybercriminals gained access to employee accounts through phishing and thus accessed the customer system. Ultimately, personal data of millions of customers was stolen. When such large amounts of customer data end up on the street, it directly affects the…
-
ISAE 3402 Type 1 vs. Type 2: The Difference and Which One to Choose
The two variants of ISAE 3402 reporting are often mentioned in tenders and assurance processes, but in practice their purpose is regularly confused. The distinction lies not in the form of the report, but in the depth of the review and the period it covers. What Type 1 precisely shows A Type…
