Taosec.net
The cybersecurity portal that keeps you constantly informed
Archive
A hypothetical anonymous case showing how a mid-size organization converted regulatory requirements into an operational compliance project. Phases, common mistakes, technical choices and practical checklists for a priori
Practical checklist to evaluate a target company's cyber and privacy risk during M&A. Essential checks, required documents, regulatory exposures and recommended contractual protections for legal and financial teams.
Practical guide for engineers and architects: technical patterns and organizational practices to reduce the collection, use and retention of personal data from project start.
Practical list of KPIs and dashboard templates to monitor compliance with GDPR, NIS2, AI Act, DORA and other frameworks, with reporting cadences and responsibilities for operational, managerial and board levels.
Practical guidance to include security and compliance requirements in public tenders and contracts. Checklist for procurement offices and sample contractual clauses.
Practical steps to embed data protection and privacy into the lifecycle of AI projects, from data collection to post-deployment monitoring, with a hands-on checklist.
Practical guide to reconciling legal obligations across privacy, cybersecurity, operational resilience and AI. A decision framework to choose common controls, document decisions and demonstrate compliance transparently.
Practical guide on designing and managing penetration testing and red teaming programs that meet regulatory obligations without disrupting operations. Covers scoping, authorizations, communication, vulnerability manageme
Practical guidance to design a modular training and awareness program differentiated by role, with KPIs and an operational checklist to assess impact on operational risk.
A practical template to design an internal audit plan covering GDPR compliance and the security obligations under NIS2. Includes governance, checklists, audit cycle and key metrics.
A practical, repeatable method to build a business case quantifying direct costs and indirect benefits of a compliance program for cybersecurity, privacy and AI.
Practical guide for IT teams and developers with measurable technical controls and processes to prove the adoption of security by design and by default.