Analyses et ressources

Intelligence de sécurité pour l'entreprise

Analyse approfondie sur la conformité, l'architecture de sécurité et les stratégies de protection des données. Restez en avant des exigences réglementaires et des menaces cyber.

Analyses prêtes pour l'audit·De nouvelles analyses chaque semaine

À venirTechnology

Immutable Is Not the Same as Verifiable: A Buyer's Guide to Audit Trail Claims

00d

00h

00m

00s

Être averti

À la une

ComplianceFinancial ServicesSecurity

Beyond the 8-K: Building the Evidence File Before You Have Four Days to Decide Materiality

The SEC gives you four business days after you determine an incident is material. The hard part is the determination, and the record of how you made it.

ROOTKeySep 25, 2026· 7 min

Lire l'article

Derniers articles

Compliance 7m

Operating Across a Half-Transposed NIS2 Map

Twenty-three member states have transposed. Several have not, and seven have been referred to the Court of Justice. Multinational entities are compliance-planning against a moving target.

ROOTKeySep 23, 2026

Compliance 8m

The Long Life of a Signature: Post-Quantum Integrity for Records You Must Keep for Decades

ML-DSA and SLH-DSA are standardised. The harder question for regulated organisations is what happens to the integrity proofs you created before them.

ROOTKeySep 18, 2026

Compliance 7m

The FIPS 140-2 Sunset and Why Your Integrity Proofs Need a Crypto Inventory

On 21 September, the remaining FIPS 140-2 certificates move to historical status. The immediate impact is procurement.

ROOTKeySep 17, 2026

Compliance 7m

You Registered. Now What? Portugal's NIS2 Obligations After the Deadline

Registration closes today. The incident reporting clock, the management accountability provisions, and the supervisory relationship all start tomorrow.

Beatriz SimõesSep 15, 2026

Compliance 7m

Geofencing and Data Residency: Proving Where Your Data Was Accessed From, Not Just Where It Lives

Residency requirements are usually implemented as a storage decision. Regulators increasingly care about a second question that storage location does not answer.

ROOTKeySep 14, 2026

Compliance 8m

DORA's First Oversight Cycle: What CTPP Designation Means for the Firms That Depend on Them

The ESAs named their first critical ICT third-party providers. Most of the commentary focused on the providers. The more interesting consequences land on their customers.

ROOTKeySep 10, 2026

Compliance 7m

CMMC Phase 2 Is Suspended, Not Cancelled: How European Suppliers Should Spend the Pause

The Department of Defense paused Phase 2 in July and guidance is expected in mid-September. The pause is an opportunity, and the work that pays off either way is evidence work.

ROOTKeySep 8, 2026

Security 6m

ROOTKey September 2026 Update: Restore Center, IP Access Control, and Data Classification

This month's releases are about control: getting deleted things back, deciding who can reach what from where, and labelling data so the platform can enforce the difference.

Ricardo DavidSep 7, 2026

Compliance 8m

The EU Network Code on Cybersecurity: The Energy Rulebook Sitting on Top of NIS2

Electricity operators are subject to a second, sector-specific cybersecurity regime that most NIS2 readiness programmes ignore entirely.

Gonçalo GilSep 3, 2026

Recevez nos analyses sur la cyber-résilience par e-mail

Des conseils pratiques et prêts pour l'audit sur l'intégrité des données, la conformité et la continuité - dès leur publication.