What the Cyberbeveiligingswet means for Dutch SMEs: scope, mandatory registration at mijn.ncsc.nl, 24-hour incident reporting, director liability, and supply-chain obligations.
What the EU AI Act means for SMEs using or building AI systems: risk classification, prohibited practices, obligations for providers and deployers, and how it intersects with the ISO 27001 and NIS2 compliance work already underway.
Practical guidance on ISO 27001:2022 — clauses 4 through 10, the Annex A controls, certification readiness, internal audit, and management review. The credibility anchor for a compliance-ready SME.
ISO/IEC 42001 — the international standard for an AI management system (AIMS): governance, risk management, and lifecycle controls for organizations developing or using AI responsibly, and how it complements an existing ISO 27001 ISMS.
DPIAs, processor agreements, retention schedules, and breach notification — GDPR and AVG compliance for European SMEs, including Dutch-specific reporting duties.
M365 Business Premium as the compliance backbone for SMBs: turn the Microsoft 365 licences you already pay for into ISO 27001 and NIS2 control evidence — Entra ID, Intune, Defender, Purview, and the automation that closes the gaps.
Free, ready-to-use templates and reference material — SoA templates, risk registers, policy packs, gap-assessment checklists, and plain-language definitions of common security terms.