The national transposition of NIS2 and the AI Act has moved from preparation to direct legal obligations for boards and CISOs. The shift from EU directive to Dutch law means immediate liability and supervisory action.
DORA is already fully in force – companies are no longer in preparation mode but under ongoing audit and reporting obligations. The priority has shifted to demonstrability, audit trails, and resilience metrics that can withstand scrutiny from regulators and customers alike.
Proactively defending against sophisticated threats through integrated recovery and crisis simulation.
Minimizing attack blast radius through comprehensive IAM, PAM, and Zero Trust principles.
Applying AI for threat detection and operational defense while governing AI risks including bias and transparency.
Securing operational technology and IoT devices while ensuring privacy by design and data minimization.
Coordinating incident response with tight reporting timelines across GDPR, NIS2, DORA.
Preparing for quantum threats while maintaining data sovereignty across borders.
