Compliance

nFADP, ISO 27001, NIST CSF: what is expected, in plain words.

A protective umbrella over a small business's laptop and files, one corner left exposed, an insurance contract with fine print nearby

ComplianceJun 22, 20267 min read

Cyber-insurance: what it really covers (and its limits)

What a cyber-insurance policy covers and excludes for a Swiss SME, and why it demands baseline security hygiene. Three concrete steps to set up this week.

A medical-practice secretary files sensitive patient folders into a lockable cabinet, one marked with a padlock

ComplianceFeb 23, 20267 min read

Data protection: what the nFADP really expects from an SME

What the nFADP concretely expects from a Swiss SME that holds sensitive data: appropriate security, a processing register, breach notification to the FDPIC. Three steps to put in place this week.

A small-business owner standing before three signposts, choosing the cybersecurity framework that fits her company

ComplianceFeb 16, 20267 min read

NIST, ISO 27001 or CIS: which cybersecurity framework fits your SME?

NIST CSF 2.0, ISO 27001 or CIS: three cybersecurity frameworks, one goal. How a Swiss SME chooses the right one, and where to start this week.