Start from the problem you need to solve
A standard to meet, a customer sending you a questionnaire, an inspection by the Garante (the Italian Data Protection Authority), a company that finally wants to know where it stands: for each case, what you need and which Dottor Box modules cover it.
The requests we receive most often
Each page explains the obligation or the problem in plain words, what you need to have in hand to show you have dealt with it, and how you build it with the platform.
NIS2 compliance: what to do, and in what order
Obligations, ACN deadlines and a phased plan from gap analysis to evidence, suppliers and incident notification.
Learn more SolutionsSystem administrators and the Garante's order
Appointments, list, annual review and access logs for system administrators, as the Italian Garante's order requires.
Learn more SolutionsAnswering customer security questionnaires
Why customer security questionnaires arrive and how to answer them with reports, compliance documents and history.
Learn more SolutionsCyber security for SMEs, with the resources you have
The real risks for small and medium-sized businesses, CIS Controls IG1 priorities and a measurable first step with the Cyber Screening.
Learn moreRisks and obligations change from one industry to another
A factory with connected machines, a practice that holds health data, a public body subject to AgID's minimum security measures (AgID is the Agency for Digital Italy): the same attack techniques, different priorities.
Cyber security for manufacturing
Production stoppages, connected machines, maintenance contractors' access, NIS2 and customer questionnaires: where to start in the factory.
Learn more IndustriesCyber security for private healthcare
Health data, connected medical devices, NIS2 and data breaches: the priorities for clinics, laboratories and care homes.
Learn more IndustriesCyber security for professional firms
Law firms, accountants and consultants: email and PEC, payment fraud, Microsoft 365, professional secrecy and the GDPR.
Learn more IndustriesCyber security for public administration
AgID minimum measures, NIS2 for public bodies and Law 90/2024: the controls to start from for Italian local authorities and public companies.
Learn moreUnderstand before you decide
The guides explain standards and techniques without selling anything; the glossary decodes the acronyms you find in reports and contracts.
Guides to cyber security and compliance
Practical guides on NIS2, SIEM, vulnerability assessment and penetration testing, data breaches, system administrator logs and an ISO 27001 checklist.
Learn more GlossaryCyber security glossary
A cyber security glossary in plain English: CVE, CVSS, SIEM, XDR, MDR, SOC, CSIRT, MITRE ATT&CK, BIA, RTO and RPO explained in simple words.
Learn moreGap analysis across 13 standards
Gap analysis across 13 standards: NIS2, GDPR, ISO 27001, DORA, CIS Controls and more. Scored on coverage and maturity, with a simulation of services.
Learn moreDo you know what someone looking for a target can see of your company?
In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.