Author: Yahya Mohamed Mao

The NIS2 Directive (Directive (EU) 2022/2555) represents the EU’s primary legal instrument to enhance cybersecurity and cyber resilience.

NIS2 decision in the Bundestag: Pressure on companies to act

The NIS2 Directive (Directive (EU) 2022/2555) represents the EU’s primary legal instrument to enhance cybersecurity and cyber resilience. The implementation of the EU NIS2 Directive into German law fundamentally reshapes the cybersecurity requirements for thousands of organizations across the country. Those who act now will not only secure compliance, but also significantly strengthen their overall cyber resilience.

Weiterlesen
EU NIS2

Rethinking cyber resilience through the lens of NIS2

As the NIS2 Directive continues to shape Europe’s digital security landscape, the conversation around cybersecurity is shifting. What began as a regulatory framework is now driving a broader rethink of how organizations manage risk, build resilience, and maintain trust in an increasingly volatile environment.

Weiterlesen
DORA Compliance: GRC as a Competitive Advantage

DORA Compliance: GRC as a Competitive Advantage

The digital transformation of the financial sector has accelerated innovation while simultaneously creating new operational risks and dependencies. Financial institutions now face unprecedented demands on their resilience. The increasing complexity of IT infrastructures, combined with ever more sophisticated cyber threats, requires a robust framework to ensure business continuity and security. This is precisely where the Digital Operational Resilience Act (DORA) comes in.

Weiterlesen
Europlaza building in Paris, home to the EBA

TPRM under new rules: EBA, DORA and MaRisk explained

The regulatory landscape for Third-Party Risk Management (TPRM) is undergoing a fundamental transformation. With the new EBA Guideline, the DORA Regulation, and the anticipated revision of MaRisk, financial institutions are required to strategically realign their outsourcing and risk governance practices. The Deggendorf Note 2025/06 delivers a thorough analysis of this shift and leaves no doubt: Excel spreadsheets and siloed solutions are no longer sufficient.

Weiterlesen
SWISS GRC DAY 2025

Review of SWISS GRC DAY 2025: GRC as a strategic compass in dynamic times

The SWISS GRC DAY 2025 has once again proven that Governance, risk, and compliance are key building blocks for resilience, innovative strength, and sustainable corporate management, not mere control mechanisms. In a world of constant change, we need responsible structures that create clarity, enable collaboration, and actively shape change, not just checkbox compliance.

Weiterlesen
Artificial intelligence has arrived in the financial sector - but according to FINMA, there is often a lack of clear governance.

FINMA on Artificial Intelligence: Widespread Use, Limited Governance

Artificial intelligence has arrived in the financial sector – but according to FINMA, there is often a lack of clear governance. This article shows why institutions need to act now to manage risks, meet regulatory requirements, and integrate AI into their governance for the long term. Responsibility begins with a structured approach.

Weiterlesen
The EU's AI Dilemma: Innovation or Over-Regulation?

The EU’s AI Dilemma: Innovation or Over-Regulation?

The tension between innovation and regulation presents the EU with a difficult task. It must find a way that both exploits the enormous potential of AI and protects the safety and rights of its citizens. The future of AI in Europe depends on how well this balance is achieved.

Weiterlesen

Swiss GRC | Switzerland (HQ) | Germany | UK | UAE