ComplianceCyber GovernanceRisk Management
The questionnaire nobody needs and nobody benefits from
A GRC tool that measures compliance through questionnaires alone does not move a company forward on NIS-2. It creates an assumption of security and hands IT one more task. The reason is written in the German BSI Act.
Alexander Busse Oct 8, 2026
Read more GovernanceCyber GovernanceNIS-2
Why Governance Programs Fail at Week 6
Most security programs do not fail at launch. They fail when initiative must become routine. Five binding routines for sustainable governance.
Alexander Busse Apr 7, 2026
Read more CybersecurityArtificial IntelligenceCyber GovernanceLeadership
AI Is Getting Better at Finding Human Mistakes: Why Cybersecurity Needs Resilient Systems
Humans are not getting worse at cybersecurity. AI is getting better at finding their mistakes. This fundamentally changes the rules of the game and makes resilient systems the most critical response.
Alexander Busse Mar 15, 2026
Read more CybersecurityGovernanceCyber GovernanceIT Security
Zero Trust Ends Where Admin Rights Are Granted Out of Convenience
Many mid-sized companies commit to Zero Trust until it becomes inconvenient. The real test does not happen in the concept document but in the permissions: Who has admin access, and why?
Alexander Busse Mar 12, 2026
Read more