Guides, playbooks andcompliance resources
Practical, question-first guides on compliance, frameworks, DevSecOps and AI security — written by and for cybersecurity and compliance experts, GRC & DevSecOps leaders to help your team get certified faster.
Deep programs, shippedmonth by month
Structured, multi-part journeys — each a complete implementation program released in monthly installments, in all eight languages.
Standaloneguides & playbooks
Focused, question-first deep-dives on a single framework or topic — read in one sitting.
ISO 27001 Certification in 2026: A Practical Guide
What ISO 27001 actually requires in 2026, the Annex A controls that matter most, and how to reach certification in under six months without drowning in documentation.
ENS (RD 311/2022) Compliance Explained
How Spain's Esquema Nacional de Seguridad works, who it applies to, and what Medio-level maturity looks like across its security dimensions.
What is an AI-CISO?
How an AI-CISO augments a security team — automating evidence collection, control mapping and continuous compliance while humans keep the judgment calls.
NIS2 & DORA: What SMBs Need to Know
The essential obligations of NIS2 and DORA for small and mid-sized businesses, who falls in scope, and the pragmatic first steps toward readiness.
DevSecOps for Compliance Teams
How to wire security and evidence collection into your CI/CD pipeline so audits become a by-product of shipping, not a fire drill.
SOC 2 for Startups: Where to Begin
A no-nonsense starting point for SOC 2 Type II — scoping the trust criteria, choosing controls, and avoiding the over-engineering that stalls early teams.