Cybersecurity
Guides to NIS2, the Cyber Resilience Act, security testing and secure development.
All Cybersecurity articles
ISO 27001 or SOC 2: which one do your customers expect?
How the certificate and the audit report differ, which markets and buyers ask for which, and how to avoid doing the same security work twice.
ISO 27001 explained: what it is and how to prepare for certification
What the standard actually requires, how the controls in Annex A fit in, what the certification audits look like and how to prepare without building a paper exercise.
Incident response plan: what to prepare before a security incident
The roles, decisions, reporting deadlines and technical groundwork to have in place before the first alert, so the worst day is not also the most chaotic one.
How to run a threat modelling workshop for your product
A practical agenda for product teams: who to invite, what to prepare, how to find threats with STRIDE and how to turn the result into work your engineers will actually do.
Zero trust explained: what it means for cloud and product teams
What the model is, what it is not, and the first changes that matter in your cloud platform and in the products you build.
From our work
Client Case: ZenseactHow Devies helped Zenseact make cybersecurity a natural part of developing safety-critical software for driver assistance and autonomous driving.
Consilium and Devies Cybersecurity+Consilium Safety Group and Devies Cybersecurity+: a partnership for future-proof cybersecurity in fire, flame and gas safety systems.