Featured · Threats and incidents6 min read
An incident is far more than a potential fine. Downtime, recovery costs, lost trust and board liability — see where the real losses arise.
Read3 resources
NIS2 and compliance5 min
The self-registration deadline passed on 3 October 2026. You can still apply, and your obligations run from the day you met the criteria anyway. Here’s what to do this week.
Read more
NIS2 and compliance9 min
The Cybersecure Waterworks programme raised the bar for the whole sector, but a grant is not a protective charm. On what ends up in the server room once the project is signed off — and who has to keep it running.
Read more
Guides for organisations
A letter from the authority, a request for explanations or an inspection date is not a problem yet. The problem is having no facts on your side.
Read more
Guides for organisations
Short answer: yes, and to a greater extent than the brochures suggest. The longer answer depends on which services you provide.
Read more
Guides for organisations
One click is an incident to handle. A second click in the same organisation is a systemic problem.
Read more
Guides for organisations
A 2021 policy, a risk register with one entry, an incident procedure no one has read. That's the most common state we find.
Read more
Guides for organisations
A full-time CISO makes no sense in a 60-person organisation. Neither does having no one responsible. In between, there’s a model that works.
Read more
Guides for organisations
Certification is a by-product of a working system. Organisations that start with the certificate pay twice.
Read more
Guides for organisations
“IT says yes” doesn't protect the board. What does is a dated, signed document listing the risks the board knowingly accepted.
Read more
Guides for organisations
Your provider is responsible for keeping systems running. Keeping them secure is your responsibility. Those are two different things — and two different bills.
Read more
Security management4 min
What can cybersecurity learn from aviation? On the procedures, accountability and daily discipline that turn a set of safeguards into organisational resilience.
Read moreThreats and incidents6 min
An incident is far more than a potential fine. Downtime, recovery costs, lost trust and board liability — see where the real losses arise.
Read moreSecurity management5 min
What does a cybersecurity audit check, how does it work and what decisions can you make based on the results? A practical explanation for organisations and boards.
Read more
Threats and incidents12 min
How does information about companies, employees and systems end up on the dark web? Learn how data trading works and what it means for organisational security.
Read moreNIS2 and compliance9 min
Why does preparing for NIS2 take time? On identifying obligations, accountability and the actions worth planning in your organisation.
Read more
NIS2 and compliance10 min
The scope of NIS2 goes beyond critical infrastructure. This article explains what the directive means for businesses, suppliers and entities in the supply chain.
Read more
NIS2 and compliance8 min
Cybersecurity is also the board’s job. On accountability, oversight and decisions that cannot be handed over entirely to IT.
Read more
NIS2 and compliance5 min
An overview of the changes to the National Cybersecurity System and what they mean for companies and institutions. Scope of obligations, accountability and organisational preparation.
Read more
Threats and incidents3 min
From reconnaissance to the attacker achieving their goal. See at which stages monitoring and a SOC team can help detect a threat and limit its impact.
Read more
NIS2 and compliance6 min
An introduction to NIS2: the directive’s goals, the scope of its requirements and the importance of risk management at organisational and board level.
Read moreSecurity management2 min
What lies behind searches for “pcyber”? An explanation of the term and the needs related to practical digital security.
Read more
Webinars1 min
Archive of the webinar on managing an organisation and business securely. See the agenda and the requirements and challenges discussed.
See the agenda
Webinars1 min
Archive of the webinar on experience of implementing NIS2 in the Czech Republic and Germany. The agenda and the perspective of European organisations.
See the agenda
Webinars2 min
Archive of the webinar on the practical aspects of implementing DORA. The agenda, the speaker and experience from implementations in large organisations.
See the agenda
Webinars1 min
Archive of the webinar on organisational gap analysis in the light of NIS2 requirements. See the agenda and topics covered.
See the agenda
Webinars1 min
Archive of a webinar from the “Cybersecurity through the Board’s Eyes” series. The agenda of a session on NIS2, accountability and organisational preparation.
See the agendaThe FortCyber blog was created as a place to organise knowledge about cybersecurity from a business and management perspective. We don’t focus on sensational headlines or technical jargon. Our aim is to help companies and institutions make informed decisions about information security. Today, cybersecurity is not just technology but a real part of organisational accountability. That’s why we write about it in a clear, practical way.
Our articles cover topics that matter to boards, business owners and managers. We focus on what really matters from the perspective of business continuity and business risk. We explain terms that often come up in conversations with auditors, regulators and partners. We show the difference between one-off actions and a systematic approach. We help separate real threats from marketing noise.
On the FortCyber blog you’ll find content on both cybersecurity and regulatory compliance. We describe legal changes such as NIS2 in terms of their practical impact on organisations. We explain which obligations may apply to companies directly and which indirectly. We show how to prepare for inspections and audits without panic. We highlight the board’s role throughout the process.
Tell us what you want to sort out. We'll show you the platform and suggest a package that fits your situation.
