News & Insights
We are your first port of call for the latest news, analysis and background information on data protection, data strategy and IT security. We keep you informed with editorially prepared news and interesting facts. Subscribe directly to our newsletter and never miss a thing again.
19.08.2026
Share Deal in a consulting firm: data valuation, information security and ISO 27001
In consulting firms, a large share of enterprise value lies in methodologies, project experience, client knowledge and reusable information assets. These intangible assets are often stored in cloud platforms, knowledge bases, project tools and AI applications. Whether this becomes scalable know-how or a costly legacy burden depends on integrated data due diligence covering data protection, information security, ISO 27001, rights review and data governance.
Read more … Share Deal in a consulting firm: data valuation, information security and ISO 27001
14.08.2026
Cyber Incident Readiness Audit: process and benefits
More and more companies are asking themselves: how well are we really prepared for a cyber incident? A Cyber Incident Readiness Audit provides a clear answer — with structured insights, concrete measures and measurable improvements.
Read more … Cyber Incident Readiness Audit: process and benefits
11.08.2026
Creating an IT security concept in 7 steps
05.08.2026
The 10 most important questions about data strategy
Data are, or should be, the most important foundation for business decisions in every company. Whether in marketing, finance, product development or HR, solid figures and facts lead to better outcomes. To achieve this, however, data must also be structured and accessible. That is only possible with a well-designed data strategy. We have summarised the 10 most important questions on this topic for you.
Read more … The 10 most important questions about data strategy
28.07.2026
The 4 most common reasons why ISO 27001 certifications fail
ISO 27001 certification rarely fails at the external audit stage; it fails at an earlier stage. ISO projects are often only worked on when there are no other urgent tasks in the company. If you want to ensure the success of your ISO 27001 project, there are a few decisive factors that have proven themselves time and again in practice.
Read more … The 4 most common reasons why ISO 27001 certifications fail
24.07.2026
AI and ransomware: how cybercriminals are weaponising artificial intelligence
Ransomware remains one of the most disruptive cyber threats facing companies worldwide. What began as simple malware that encrypted files for a quick ransom has grown into a criminal industry worth billions. The latest trend making ransomware even more dangerous is the use of artificial intelligence (AI) by cybercriminals. AI has long ceased to be a tool for defenders alone: attackers are learning to exploit its capabilities to attack faster, with greater sophistication and to greater effect.
Read more … AI and ransomware: how cybercriminals are weaponising artificial intelligence
21.07.2026
Microsoft 365 & data protection: identify risks, implement measures and work in compliance with the GDPR
Whether Microsoft 365 can be used in compliance with data protection law cannot be answered with a blanket yes or no. What matters is the specific way in which it is used in the respective company. The situation has improved since 2022, but parts of the criticism previously raised by supervisory authorities remain. We explain the actual risks, the current position of the authorities and the measures that matter now.
16.07.2026
NIS2 Tools for SMEs: why tools help, but cannot buy compliance
No tool automatically makes a company NIS2-compliant. Tools only accelerate implementation if risks, responsibilities and processes have been clarified first. We show which tool categories you really need, what a pragmatic basic stack looks like and which questions you should answer before making any purchase.
Read more … NIS2 Tools for SMEs: why tools help, but cannot buy compliance
12.07.2026
Cyber risk management: 5 steps that make a real difference now
Cybersecurity has long since ceased to be optional. It is now a requirement. Growing threats and increasing regulation from NIS2, DORA and the GDPR to the Cyber Resilience Act and the AI Act, are putting companies under pressure to act. Those who address risks systematically make better decisions and protect the business sustainably.
Read more … Cyber risk management: 5 steps that make a real difference now
08.07.2026
Do the new LEGO Smart Bricks have to comply with the Cyber Resilience Act?
LEGO is currently attracting a lot of attention: its new Smart Bricks combine classic building bricks with digital technology. But what at first glance looks like fun raises an interesting regulatory question on closer inspection: do the Smart Bricks fall within the scope of the Cyber Resilience Act (CRA)?
Read more … Do the new LEGO Smart Bricks have to comply with the Cyber Resilience Act?