Compliance & continuity
KANAP articles about Compliance & continuity.
-
The incident register
A year after an outage, the auditor or the insurer asks for details. When it started, who decided what, who did what, whether the right parties were notified. An incident register must be able to answer these questions, and it gets you ready for NIS2 at the same time.
Compliance & continuity 6 min -
Vulnerabilities: from the CVE to the business application
Every week brings its share of critical vulnerabilities. The real question is: which ones affect your business applications, and who has to act? KANAP can help, from the published CVE to the recorded decision, including identifying the servers and applications affected.
Compliance & continuity 6 min -
Classifying your applications: criticality, data, recovery, the groundwork for NIS2
Business and cyber criticality, data, recovery plan: classifying every application is the work that comes before any NIS2 effort. A method and a tool, without the spreadsheet.
Compliance & continuity 5 min