Cryptographic Key Management for ISO 27001, NIS2 and DORA
A practical guide to governing cryptographic keys, cloud KMS, HSMs, rotation, recovery and audit evidence through ISO/IEC 27001:2022, NIS2, DORA and GDPR Article 32.
DORA
Explore articles in the DORA category
106 articles
EUCS Cloud Certification Evidence for 2026 Audits
EUCS cloud certification can strengthen cloud provider assurance in 2026, but it must be mapped into your ISO 27001 ISMS, supplier risk process, contracts, incident playbooks and GDPR accountability evidence.
14 min
From Scans to Evidence: ISO 27001:2022, NIS2, DORA
A practical CISO guide to converting vulnerability scans, patch logs, risk decisions and exceptions into audit-ready evidence for ISO 27001:2022, NIS2, DORA, GDPR and COBIT 2019.
14 min
Microsoft Entra Conditional Access Governance in 2026
A practical guide for governing Microsoft Entra Conditional Access as an auditable control system, with ISO/IEC 27001:2022, NIS2, DORA, GDPR, NIST and COBIT evidence mapping.
Policy Lifecycle Governance for ISO 27001, NIS2, DORA
Policy governance is now evidence governance. Learn how to control ISO/IEC 27001:2022 documented information and build audit-ready evidence for NIS2, DORA and GDPR.
ISO 27001 ISMS Scope for NIS2, DORA and GDPR
A practical CISO guide to defining ISO 27001 ISMS scope across NIS2 essential services, DORA critical or important functions, GDPR processing, assets, suppliers and audit evidence.
Quantitative Cyber Risk Assessment for NIS2 and DORA
A practical guide for CISOs, compliance managers and boards on translating qualitative cyber risks into financial exposure, ISO 27001 evidence, NIS2 oversight and DORA ICT resilience decisions.
14 min
The CISO’s Guide to Audit-Ready Forensic Readiness: Unifying NIS2, DORA, ISO 27001, and GDPR
This comprehensive article provides a scenario-driven guide for CISOs on establishing a forensic readiness capability that meets stringent regulatory and audit demands across NIS2, DORA, ISO 27001, and GDPR.
CISA KEV Governance for ISO 27001, NIS2 and DORA
Known exploited vulnerabilities require more than faster patching. This flagship guide shows how to convert CISA KEV and ENISA EUVD intelligence into ISO 27001, NIS2, DORA and GDPR-ready governance evidence.