Two-factor authentication (2FA) and regulatory compliance
Why NIS2, DORA, ISO 27001, the ENS and GDPR expect two-factor authentication (2FA), how to roll it out well and how to document it as evidence.
-
-
DORA: resilience testing (TLPT) explained
What DORA resilience testing and TLPT (threat-led penetration testing) are, and how to prepare your entity to pass them.
-
ENS: how to comply with the Spanish National Security Framework
A practical guide to ENS compliance: who it applies to, categories, compliance steps and how to leverage the overlap with NIS2 and ISO 27001.
-
EU Data Act: what it means for your company
The EU Data Act changes access to and use of data from connected products and cloud services: what it means and what to do.
-
ISO 27001:2022: the Annex A changes and what to do after the transition
What changes in ISO 27001:2022 Annex A: from 114 to 93 controls, the 11 new ones and how to transition from the 2013 version.
-
GDPR in 2026: an updated compliance checklist
An updated GDPR checklist for 2026: RoPA, legal bases, cookies, international transfers, AI and breach notification.
-
NIS2 in Spain: law still pending, the State before the CJEU and what to do meanwhile
Spain still has not transposed NIS2 and the Commission referred it to the CJEU (Jul 2026). What is enforceable today, how NIS2 already reaches you and what to do before the law lands.
-
NIS2: a 90-day implementation plan
A practical 90-day plan to comply with NIS2: scope and governance, risk analysis, Article 21 measures and evidence.
-
Automated compliance evidence: less audit pain, more control
Automated compliance evidence removes weeks of manual work before every audit: what it is, the benefits and how it works.
-
DORA: information register and ICT third-party management
The DORA register of information and ICT third-party management, step by step: what it must contain, what the supervisor expects and mistakes to avoid.
-
Comply with multiple regulations without duplication: the control map
How to meet GDPR, NIS2, DORA, ENS and ISO 27001 without duplicating work using a control map: define evidence once and reuse it.
-
CRA (Cyber Resilience Act): obligations and how to prepare
The Cyber Resilience Act (CRA) brings cybersecurity requirements for products with digital elements: obligations, key dates and how to prepare.
