Security and compliance guides

Find a starting point for the security and compliance questions that come up while running a business. Each guide explains the work involved and the evidence worth keeping.

How fast can I get ISO 27001 certified?

Plan your ISO 27001 timeline around the work, evidence and audit availability that determine your certification date.

Does NIS2 apply to my company?

Assess NIS2 scope, Dutch implementation and the difference between legal obligations and customer security requirements.

I don't test my backups. Am I in trouble?

Turn a successful backup job into evidence that you can recover, with a practical restore test and follow-up process.

A customer sent us a security questionnaire. Where do we start?

Answer security questionnaires accurately, collect supporting evidence and avoid repeating the work for every customer.

ISO 27001 or SOC 2: which do we need?

Choose between ISO 27001 certification and a SOC 2 report based on customer requirements, scope and the evidence they need.

Can we keep using our existing tools for compliance?

Use tickets, repositories and monitoring results as evidence, with custom API submissions and reusable manual evidence slots.

Someone left the company. Did we revoke all their access?

Check offboarding beyond the main login: local accounts, active sessions, shared secrets and ownership transfers.

Our cloud provider is certified. Why do we need to do anything?

Understand what cloud assurance covers and which security responsibilities remain with your own team.

What happens if an auditor finds something wrong?

Understand audit findings, corrective actions and the evidence needed to show that a problem has been addressed.

We passed the audit. What do we need to keep doing?

Maintain controls and evidence between audits, respond to changes and prepare for the next assessment without rebuilding the record.