11 Apr
You’re an InfoSec Professional Not a Kinderkarten Teacher
Every minute you spend chasing other people for security work is a minute stolen from actual security work.
10 Apr
How To Do Policy Training Better
Because nobody learns from a snoozefest. List of actionable small adjustments to make your trainings less boring.
08 Apr
19 Essential KPIs to Track Your ISMS’s Effectiveness
List of universal KPIs and metrics to measure the progress and effectiveness of any information security management program.
07 Apr
GRC Metrics & KPIs Checklist with Example KPIs
Checklist for choosing KPIs for GRC program with Example KPIs
02 Apr
Risk Management Fail: Mixing Causes with the Risk Itself
People often mix up the risk itself with its potential cause or mitigation. This mistake can significantly impact how risks are understood and managed.
01 Apr
NIS 2 Just Came Out But We Already Know What NIS 3 Will Bring
In 7-8 years, my dad’s dairy farm and other “normal” non-techy companies will need to have formal information security programs. Here’s why: The World Economic Forum (WEF) has been publishing their Cybersecurity Outlook reports since 2022. In the latest 2025
English 
Estonian