Compliance Uncovered

A Letter from our CEO

With the NIS2 Directive, Europe is entering a new era of digital security. But what does the future look like — and what opportunities and challenges does this bring for companies, authorities and society as a whole?

The NIS2 Directive brings a breath of fresh air to the corporate world in the EU. Especially for companies dealing with critical infrastructure or digital services, the new requirements are a real game changer. But what does that mean in practice? Who is affected, what needs to happen — and how can you turn challenges into opportunities?

Imagine that the power is suddenly gone — a cyber attack has paralyzed the network. It is precisely such scenarios that the NIS2 Directive aims to prevent. It is Europe's answer to growing digital threats.

Kertos Co-founder and CEO, Dr. Kilian Schmidt, talks about the future of #EffortlessCompliance. What started with the automation of a single privacy workflow quickly evolved into an all-in-one platform that simplifies the complexities of regulations and certifications.

This is a significant moment for us at Kertos — and for the future of compliance! Companies in Europe are faced with the challenge of growing, driving innovation and scaling. Compliance shouldn't be a hurdle, but a real enabler. That's exactly why we're breaking new ground and redefining compliance: intuitive, effortless and AI-powered.

Kertos received 2.2 million euros in funding from the European Union in 2024 as part of the EUPROFIT project! These funds support our mission to automate manual and often costly compliance with data protection regulations through innovative AI solutions.

The new EU AI Act sets global standards for the regulation of AI systems. Learn how the risk-based approach works, what potential fines could be imposed, and how Kertos can support you in ensuring compliance.

Find out everything about ISO 27001 certification in our ultimate guide: why it is the gold standard for information security, how the process works and what benefits it offers you.

Announced in December 2022, the NIS2 Directive is the successor to the NIS Directive. This regulatory framework upgrades the cybersecurity posture of networks and information systems across the EU.

Shadow IT is similar to the story of Trojan horses and insider threats in a B2B environment. Just like the inadvertent actions of guards expose the castle to intruders, employees may unknowingly open a gateway for cybercriminals.

In recent years, mobile devices have found an irresistible presence in the corporate world. The widespread adoption of mobile devices in enterprises got a boost with the COVID-led remote working trend gaining traction.

ISO 27001:2022 is an updated version of the ISO 27001 standard. The previous version, ISO 27001:2013, included 114 controls, divided into 14 domains. The “Annex A” of ISO 27001:2022 contains many changes.

ISO held a meeting in 2001 to discuss the revision of ISO 17799. The updated standard, known as ISO/IEC 27001, has since established itself as a globally recognized standard for information security management.

94% of consumers want control over their personal data. Learn how to handle data subject access requests in compliance with the GDPR.

One of the biggest challenges on the path to founding a company is ensuring the security of your own information assets. We want to share valuable insights from our experience with ISO 27001, a globally recognized standard for ISMS.

Read our article to learn how ISO 27001 certification protects your company while opening up new business opportunities.

Learn how ISO 27701 certification helps companies improve data protection and facilitate cross-border data transfers. Increase customer trust and open up international markets with solid data protection management.

The duties of a data protection officer include in particular taking on an intermediary role, acting as a contact person and providing the necessary documents and information to the supervisory authority.

On the road to compliance with ISO 27001, organisations undergo two types of audits: internal and external audits. Internal audit is the foundation on which top management in an organisation makes informed decisions regarding their readiness for external audit.

Discover how improving data protection can help companies comply with laws and regulations while enhancing their reputation with customers.

Read this article to find out how data discovery can help you find relevant data in Hubspot, Mailchimp, etc., and thus prepare it for GDPR documentation.

Growing technology companies should consider SOC 2 compliance. The key benefits of SOC 2 compliance include increased customer trust and competitive advantages.

In our business world, compliance is not just a necessary evil, but a competitive advantage.

The increasing use of AI to make decisions in high-risk areas such as healthcare, human resources, education, and e-commerce has raised ethical, societal, and economic concerns.

Most often, NIS2 and ISO 27001 are intertwined together. ISO 27001 touches NIS2 at many key points that facilitate compliance with the latter if the former is achieved.