Blog

Incident readiness, in practice

Tabletop exercises, NIS2, and how teams actually get better at incident response — from the simler team.

Does the Cyberbeveiligingswet apply to your organisation? How to work it out.

Scope under the Cbw depends on sector, size and a set of exceptions where size stops mattering. How to work out whether the law applies to you — and the four places organisations get it wrong.

August 11, 20264 minRead more

CyberbeveiligingswetNIS2Compliance

The Cyberbeveiligingswet comes into force on 15 August. Here's what it means.

The Dutch implementation of NIS2 is final: from 15 August, around 8,000 organisations across 18 sectors are directly in scope — with no transition period. What the duty of care, board accountability, and supply-chain reach mean in practice.

July 17, 20263 minRead more

NIS2ComplianceTabletop exercises

What NIS2 Article 21 actually requires for cybersecurity exercises

NIS2 doesn't just ask for technical controls. Article 21 expects you to test how well your organization responds — and to prove it. Here is what that means in practice.

June 13, 20264 minRead more

Tabletop exercisesGuideIncident response

How to run a tabletop exercise: a step-by-step guide

From objectives to debrief: the seven steps of a tabletop exercise that actually changes how your team responds — and the mistakes that flatten most of them.

June 9, 20264 minRead more

Tabletop exercisesAIComparison

AI-driven vs consultant-led tabletop exercises: an honest comparison

Consultant-led tabletops cost thousands and happen once a year. AI-driven exercises cost a subscription and happen monthly. Here is where each model wins — without the vendor gloss.

June 5, 20263 minRead more

RansomwareTabletop exercisesScenarios

Ransomware tabletop scenario: what a good exercise looks like

A strong ransomware tabletop is not 'your files are encrypted, discuss'. Here is the anatomy of a scenario that forces real decisions — with a sample inject timeline.

June 1, 20264 minRead more