Running your NIS2 compliance programme, step by step
NIS2 compliance: the concrete steps, from scope and ReCyF gap analysis to risk-based prioritisation and evidence managem…
GRC tools: the selection grid for CISOs and DPOs
Comparing GRC tools: solution families, criteria grid, TCO and data sovereignty. The selection guide for CISOs, DPOs and…
GDPR and AI Act compliance: building a single framework
GDPR and AI Act compliance: pool your registers, impact assessments and security controls in a single framework. A guide…
AI Act: who is concerned, by what, and how to comply
The AI Act has applied in stages since February 2025. Who is concerned, risk levels, timeline, sanctions and a method to…
ReCyF: the new ANSSI framework for NIS 2 is already available in Make IT Safe
ReCyF, the ANSSI framework for NIS 2: twenty security objectives, acceptable means of compliance and integration in Make…
TPRM: the operational guide to securing your critical suppliers
TPRM: map your critical suppliers, assess third-party risk 360°, monitor it continuously and equip the programme. The op…
DORA contextual menu: how feature flags transform our application
DORA contextual menu: how we integrated feature flags with GrowthBook to enable features per customer, and their first u…
Modern Data Stack: a modern data infrastructure for strategic decisions
Modern Data Stack: how Make IT Safe built an open-source, sovereign data infrastructure with Airbyte, DBT, ClickHouse an…
Health-data security: how to protect sensitive information in compliance with regulations
Health-data security: threats, cyberattacks on hospitals, the GDPR, NIS 2 and HIPAA frameworks, and best practices to pr…
ISO 27004: full guide to measure and improve your ISMS effectiveness
ISO 27004: how to define ISMS performance indicators, measure and track them, with the implementation steps and the mist…
ISO 27003: practical guide to deploy an effective ISMS
ISO 27003: what the standard adds to ISO 27001, the four steps to implement an ISMS and the common mistakes to avoid alo…
ISO 27100: understand the standard and its impact on information security
ISO 27100: what this technical specification on cybersecurity concepts covers, and how it relates to ISO 27001 and ISO 2…