A data breach response plan for a small company hands five jobs (contain, assess, notify, record and fix) to named people. That way nobody is guessing who does what in the first few hours. And the trigger can be anything: a laptop left on a train, a hijacked mailbox sending invoices to your clients, a […]
The Cyber Resilience Act reporting rules put new duties on manufacturers. Not on the small companies that buy their products. But they do hand you, the buyer, a solid excuse to ask every vendor one thing: how will news of a flaw and its fix actually reach us? What follows is the customer’s side of […]
One habit stops invoice fraud and business email compromise: never change bank or contact details on the strength of an email alone. Call back on a number you already have on file, and get a second person to approve the change before anything is saved. In late July 2026 the habit matters more than usual, […]
Short answer to the NIS2 small business question? The directive probably doesn’t cover your company directly. But it will reach you anyway, through the larger clients it does cover. According to the Commission’s NIS2 overview, Member States had until 17 October 2024 to transpose the directive into national law, and many missed that deadline. And […]