Since 15 September 2026, Spanish carriers block any SMS whose alias is not listed in the CNMC registry. What that means for smishing and vishing simulations.
Since 15 September 2026, Spanish carriers block any SMS whose alias is not listed in the CNMC registry. What that means for smishing and vishing simulations.
Awareness program continuity gets tested by a vacancy. What keeps running on its own, what was left tied to one person’s name, and what to measure.
What a business continuity exercise proves, what stays unverified when there is advance notice, and what to do with the deviations it finds.
The Digital Omnibus postponed high-risk rules, not training. What the AI Act requires on AI literacy for staff, and since when it is supervised.
DORA has applied since January 2025 and there is no official register of covered entities. Who DORA applies to, who falls outside, and what it asks of people.
Training expiry and new hires move your compliance all year round. How a plan absorbs both on its own, without you rebuilding the spreadsheet.
What a vendor security questionnaire measures, why certifications answer less than they seem to, and the five questions that tell vendors apart.
The business continuity plan gets approved and filed. ISO 22301 asks for competence and awareness, and those are the clauses that rarely get implemented.