Cyber Compliance — Blog https://www.cybercompliance.app/en/blog Latest from Blog en Fri, 05 Jun 2026 00:51:55 GMT GDPR Article 32 in practice: which security controls actually satisfy it https://www.cybercompliance.app/en/blog/gdpr-article-32-security-controls https://www.cybercompliance.app/en/blog/gdpr-article-32-security-controls Article 32 names encryption and resilience but refuses to give you a checklist. Here is how regulators read it after a breach, and which ISO 27001 and CIS controls map to each clause. Florian Amette Thu, 04 Jun 2026 00:00:00 GMT Mapping ISO 27001 to SOC 2: what actually overlaps, and where teams get burned https://www.cybercompliance.app/en/blog/iso-27001-to-soc-2-mapping https://www.cybercompliance.app/en/blog/iso-27001-to-soc-2-mapping A practitioner's view of the ISO 27001 Annex A to SOC 2 Trust Services Criteria mapping. The real overlap, the parts that don't map, and the evidence mistakes that cost you a second audit. Florian Amette Thu, 04 Jun 2026 00:00:00 GMT NIS2 vs DORA: which one applies to you, and how to avoid building two programs https://www.cybercompliance.app/en/blog/nis2-vs-dora https://www.cybercompliance.app/en/blog/nis2-vs-dora Scope, incident reporting timelines, and the lex specialis rule that decides whether a financial entity follows DORA or NIS2. Plus how both map onto ISO 27001 so you run one control set. Florian Amette Thu, 04 Jun 2026 00:00:00 GMT