Guides to cyber security and compliance
Standards and techniques explained for decision-makers: what they really require, what needs doing, which mistakes to avoid. Written by Dottor Marc's specialists and updated when the rules change.
Worth reading before a decision, an audit or an incident
NIS2: who must comply and what they must do
Who falls under NIS2 in Italy, the difference between essential and important entities, ACN deadlines, notification and fines.
Learn more GuideVulnerability assessment vs penetration test: the differences
The goal, method, frequency and cost of vulnerability assessments and penetration tests, and when you need each one.
Learn more GuideWhat is a SIEM and what is it for?
What SIEM means, how it works, how it differs from XDR, EDR and SOAR, which logs to collect and what standards require.
Learn more GuideData breach: what to do in the 72 hours
Notifying the Garante within 72 hours, telling data subjects, the breach register and NIS2 notification: what to do and when.
Learn more GuideSystem administrator logs: what to keep and for how long
Who is a system administrator, which logins to record, retention for at least six months, integrity and the annual check.
Learn more GuideISO 27001:2022 checklist
Clauses 4-10, Annex A with its 93 controls, mandatory documents, internal audit and the ISO 27001 certification stages.
Learn moreThe cyber security glossary
CVE, CVSS, SIEM, XDR, MDR, RTO: short definitions of the terms you find in the guides, reports and contracts.
Cyber security glossary
A cyber security glossary in plain English: CVE, CVSS, SIEM, XDR, MDR, SOC, CSIRT, MITRE ATT&CK, BIA, RTO and RPO explained in simple words.
Learn more SolutionsStart from the problem you need to solve
NIS2 compliance, system administrators, customer security questionnaires and cyber security for SMEs: start from the problem you need to solve.
Learn moreGap analysis across 13 standards
Gap analysis across 13 standards: NIS2, GDPR, ISO 27001, DORA, CIS Controls and more. Scored on coverage and maturity, with a simulation of services.
Learn moreDo you know what someone looking for a target can see of your company?
In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.