Business Email Compromise·
Business email compromise needs no malware. The loss is yours by law.
Business email compromise needs no malware, so your security tools miss it, and EU payment law leaves the loss with you. Five rules stop it.
Risk Management·
How Much Should an SMB Spend on Cybersecurity? Every Benchmark Answers in Percentages. You Need a Number.
Security benchmarks say 9–11% of IT budget, but enterprise percentages mislead SMBs. What a 50, 150 or 500-person company should budget, in euros.
Virtual CISO·
The Brain, the Hands, and the Specialist: A Buyer's Guide to vCISO vs. MSSP vs. Consultant
SMBs under €50M are really choosing between three things: a leader, an operator, and a specialist. How to tell a vCISO, an MSSP and a consultant apart.
Ransomware·
Friday 18:47 to Monday 08:00: Anatomy of a Ransomware Attack on a 50-Person Company
An hour-by-hour reconstruction of a ransomware attack on a 50-person company: from the Friday click to the Monday ransom note, and where it is really decided.
Incident Response·
Incident Response Without a SOC: The 5-Step Playbook a 50-Person Company Can Actually Run
A practical 5-step incident response playbook for SMEs without a SOC — prepare, detect, contain, recover, report. Mapped to NIST 800-61r3, NIS2 and CRA clocks.
Virtual CISO·
What a vCISO Actually Does in Month 1, Month 3, and Month 12 — A Timeline Your Board Can Hold Us To
What a virtual CISO actually delivers in month 1, month 3, and month 12 — a concrete milestone timeline SMB and mid-market boards can hold any provider to.
Virtual CISO·
10 Questions to Ask Before You Hire a vCISO — And the Answers That Should End the Meeting
Ten questions that separate a real vCISO from a templated invoice — and the red-flag answers to listen for. A vendor-neutral buyer's guide for SMB and mid-market boards.
Cloud Security·
Remote Work, Real Risk: How to Secure a Distributed Team Without a Big IT Budget
Distributed teams demolished the traditional perimeter. Here is the SMB-sized stack — MFA, EDR, ZTNA basics — that delivers most of the protection without enterprise spend.
Cyber Insurance·
Cyber Insurance Isn't Enough: What Insurers Won't Tell You About Coverage Gaps
A cyber policy pays on what you declared, not on what you think you bought. What it pays, what it never will, France's 72-hour rule and a 30-minute check.
Roadmap·
Your 90-Day Cybersecurity Roadmap: From Vulnerable to Confident
A pragmatic, three-month plan for SMBs starting from scratch. Quick wins month one, the human firewall month two, governance month three.
Data Breach·
The $50K Mistake: What a Single Data Breach Really Costs a Small Business
A data breach is not a technology failure — it is a business-ending financial event. Where the €50k-€150k goes, line by line, and the prevention math.
Cyber Risk·
Why Small Businesses Are Now the #1 Target for Cybercriminals (And What to Do About It)
Over 43% of cyberattacks now hit SMBs and only 14% are prepared. Why attackers chose this market — and the five-step response that closes the gap.