With NIS2, the focus moves toward how security is actually managed in day-to-day operations. An important part of NIS2 is operational discipline: Knowing which assets exist, who’s responsible for them, how incidents are handled, how changes are controlled, and whether the necessary records are already available in the system. The question is whether existing tools…
Read MoreWhen organizations think about cybersecurity, the conversation often starts with compliance. ISO 27001, PCI-DSS, HIPAA, GDPR, NIS2… frameworks and regulations designed to protect sensitive data and establish minimum standards for risk management. Achieving compliance is often seen as the ultimate milestone: once the certificate is obtained or the audit is passed, the company is considered…
Read MoreIn questo e nel prossimo blog vorrei analizzare il ruolo dell’ IT Asset Management (ITAM) nell’adeguamento al nuovo regolamento generale sulla protezione dei dati (GDPR). In questo primo articolo introdurremo brevemente cosa è il GDPR, quali misure introduce e come la gestione degli asset IT possa supportarlo. Nella prossimo articolo vedremo quali moduli mette a…
Read MoreIn this post, and in the one that will follow in the next weeks, I would like to analyze the role of IT Asset Management in adapting to the new General Data Protection Regulations (GDPR). In this first article I will briefly introduce what the GDPR is, what measures it introduces, and how the IT…
Read More