The NIS2 directive and its Spanish transposition: which entities fall in scope, governance duties, incident reporting deadlines and management liability.
A 2026 comparison of Formalize, Copla and Qalea: what each GRC platform does well, who it is built for, and who runs the controls between audits.
The ten cybersecurity measures NIS2 Article 21 requires, how proportionality applies, what management has to approve and the evidence a supervisor will ask to see.
How NIS2 sorts companies into essential and important entities, why both share the same obligations, and how supervision, fines and registration differ between the two categories.
What DORA and NIS2 each require for supplier risk management, where ISO 27001 already covers the ground, and how to build one supplier inventory that serves both.
Which Spanish companies are in scope of NIS2, how it reaches SMEs through the supply chain, and the measures, reporting deadlines and board accountability it requires.
NIS2 and DORA both set staged incident reporting deadlines that start the moment you detect. Here is the 24, 72 and one-month structure, and what it takes to meet it.
The EU Cyber Resilience Act sets binding security rules for products with digital elements. What it covers, what manufacturers must do, and the deadlines that already apply.
Leave us your data and we will get in contact with you shortly.
