The cyber insurance you do not have
Two judgments on answers in the risk questionnaire. Once the insurer is ordered to pay just under EUR 2.86 million, once the contract is void. What separates the cases and what that means for your policy.
Crisis Organization When It Counts: When No One Knows What to Do Now
In a crisis exercise, the team lead's first words were: "Wait, where does it say what I'm supposed to do?" Crisis organization is not a PDF. Either it works or it does not exist.
Prompt Injection: Why AI Agents Have a Governance Problem That Cannot Be Patched Away
OpenAI reveals: prompt injection attacks succeed despite protective mechanisms in 50 percent of cases. Why this is not a technical but a governance problem, and which five principles organizations should implement now.
NIS-2 Incident Reporting Under Pressure: Why Friday Evening at 5:30 PM Is the Ultimate Test
NIS-2 incident reporting fails not because documentation is missing, but because the process breaks down under stress. What mid-sized businesses need to do now.