NIS 2-Direktivet, Direktiv (EU) 2022/2555, om foranstaltninger til sikring af et højt fælles cybersikkerhedsniveau i hele Unionen, bliver snart til dansk lov. Den 6. februar 2025 blev NIS 2-loven fremsat i folketinget (L141), og heraf fremgår det, at kommuner under nogle betingelser også bliver omfattet af NIS 2. Først og fremmest bliver kommuner jf. § […]
Why Arba relies on maturity scores
When you use the Arba platform, you choose a standard or framework to work with and fill out a questionnaire regarding how far you have already come with implementing that standard. The situation might remind you of an audit situation or of writing a statement of applicability, where you decide for each control: Has this […]
Why cyberspace is getting more complex – and what it means for your organization
The global economy now operates in an increasingly complex cyberspace. Rapidly evolving technologies, overlapping regulations, and heightened geopolitical tensions are combining to create a perfect storm of cyber threats. This growing complexity isn’t just a talking point—it’s a reality that organizations of all sizes must learn to navigate. Below, I highlight critical drivers behind today’s […]
Why access management is more critical than ever – lessons from DEF CON 2024 (the hacker’s den)
Why is access management so crucial? As more organizations embrace public cloud services to gain efficiency, flexibility, and scalability, the need to effectively manage and protect digital identities has never been greater. With data and resources stored remotely, Identity and Access Management (IAM) becomes one of the most critical defenses against cyber threats. Without a […]
What is supply chain security in NIS 2?
What you didn’t know that you already knew about security in the supply chain from NIS 2 Article 21(2)(d) If you know about the EU’s NIS 2 Directive, then you may already have wondered (or worried) about the term ‘supply chain security’ in Article 21(2)(d) and what it means for your organization. Among the many […]
Kompleksiteten i hjertet af cyber
Ledelsens involvering i cybersikkerhed Mens du læser det her, sidder nogen og klør sig i hovedbunden, mens de overvejer, hvordan de hæver informationssikkerheden i deres organisation uden at overskride deres budgetter og sænke deres produktivitet. Men det vil formentlig ikke lykkes. Projekter inden for informationssikkerhed fejler alt for ofte ved at levere under mål og […]