https://asphalia-analytics.com/blog/ Expert insights on information security, OSINT techniques, external attack surface management, and ISO 27001 compliance from Asphalia Analytics. en-us
Warning: Undefined array key 1 in /home/clients/560b76ecec6b7cc905ea6d7ae972792e/sites/asphalia-analytics.be/blog/postRenderer.php on line 22

Warning: Undefined array key 1 in /home/clients/560b76ecec6b7cc905ea6d7ae972792e/sites/asphalia-analytics.be/blog/postRenderer.php on line 22
https://asphalia-analytics.com/blog/CRA Assessment Tool Is your product subject to the EU Cyber Resilience Act? The CRA (Regulation EU 2024/2847) applies to virtually all products with digital elements sold in the EU — with full compliance required by 11 December 2027 and reporting obligations starting 11 September 2026. Mon, 16 Feb 2026 12:29:55 +0100 https://asphalia-analytics.com/blog/ Mon, 16 Feb 2026 12:15:15 +0100 https://asphalia-analytics.com/blog/CybersecurityAct2 Seven years after the original Cybersecurity Act, the EU is ready for version 2.0. CSA2 brings mandatory supply chain security measures, stronger ENISA capabilities, and the ability to force the removal of high-risk components from critical infrastructure — even retroactively. CSA2 is here, and it's not just an update — it's a reset. The European Commission's January 2026 proposal tackles supply chain risks head-on, with new powers to ban high-risk vendors from 5G networks and critical sectors, a reinforced ENISA, and a certification framework that finally moves beyond voluntary adoption. Thu, 29 Jan 2026 11:13:28 +0100 https://asphalia-analytics.com/blog/NIS2-2026-Amendments If you've just finished mapping your NIS2 obligations, you might not want to hear this — but the directive was explicitly designed to evolve, and the first major review cycle is already approaching in 2026. Understanding what the European Commission will be evaluating, from sector coverage to cross-border coordination mechanisms, can help you build a compliance programme that won't need a complete overhaul when the amendments arrive. Here's a breakdown of what to watch for. Thu, 29 Jan 2026 10:19:51 +0100 https://asphalia-analytics.com/blog/ Thu, 29 Jan 2026 10:07:24 +0100 https://asphalia-analytics.com/blog/NIS2-2026-updates The European Commission just announced targeted amendments to NIS2 that promise to simplify compliance for 28,700 companies - but does 'simplification' really mean easier, or just different hoops to jump through? Thu, 29 Jan 2026 10:02:56 +0100 https://asphalia-analytics.com/blog/UseCaseAsphaliaAnalytics1 NIS2 Compliance: Know Your Attack Surface The Challenge Sat, 06 Dec 2025 17:15:26 +0100 https://asphalia-analytics.com/blog/UseCaseAsphaliaAnalytics2 Cyber Resilience Act: Assess Your Risks Before Market Launch The Challenge Sat, 06 Dec 2025 17:15:16 +0100 https://asphalia-analytics.com/blog/UseCaseAsphaliaAnalytics3 M&A Due Diligence: Evaluate the Cyber Risk of Your Target The Challenge Sat, 06 Dec 2025 17:15:06 +0100 https://asphalia-analytics.com/blog/UseCaseAsphaliaAnalytics4 Supply Chain Security: Vendor Risk Assessment The Challenge Sat, 06 Dec 2025 17:14:52 +0100 https://asphalia-analytics.com/blog/5.01 - Policies for Information Security - OnePager-1 Tue, 04 Nov 2025 12:58:24 +0100 https://asphalia-analytics.com/blog/5.02 - Information security roles and responsibilities - OnePager-1 Tue, 04 Nov 2025 12:58:23 +0100 https://asphalia-analytics.com/blog/5.03 - Segregation of duties - OnePager-1 Tue, 04 Nov 2025 12:58:22 +0100 https://asphalia-analytics.com/blog/5.04 - Management responsibilities - OnePager-1 Tue, 04 Nov 2025 12:58:21 +0100 https://asphalia-analytics.com/blog/5.05 - Contact with authorities - OnePager-1 Tue, 04 Nov 2025 12:58:20 +0100 https://asphalia-analytics.com/blog/5.06 - Contact with special interest groups - OnePager-1 Tue, 04 Nov 2025 12:58:19 +0100 https://asphalia-analytics.com/blog/5.07 - Threat Intelligence - OnePager-1 Tue, 04 Nov 2025 12:58:18 +0100 https://asphalia-analytics.com/blog/5.08 - Information security in project management - OnePager-1 Tue, 04 Nov 2025 12:58:17 +0100 https://asphalia-analytics.com/blog/5.09 - Inventory of information and other associated assets - OnePager-1 Tue, 04 Nov 2025 12:58:16 +0100 https://asphalia-analytics.com/blog/5.10 - Acceptable use of information and other associated assets - OnePager-1 Tue, 04 Nov 2025 12:58:15 +0100 https://asphalia-analytics.com/blog/5.11 - Return of assets - OnePager-1 Tue, 04 Nov 2025 12:58:14 +0100 https://asphalia-analytics.com/blog/5.12 - Classification of information - OnePager-1 Tue, 04 Nov 2025 12:58:13 +0100 https://asphalia-analytics.com/blog/5.13 - Labelling of information - OnePager-1 Tue, 04 Nov 2025 12:58:12 +0100 https://asphalia-analytics.com/blog/5.14 - Information transfer - OnePager-1 Tue, 04 Nov 2025 12:58:11 +0100 https://asphalia-analytics.com/blog/5.15 - Access control - OnePager-1 Tue, 04 Nov 2025 12:58:10 +0100 https://asphalia-analytics.com/blog/5.16 - Identity management - OnePager-1 Tue, 04 Nov 2025 12:58:09 +0100 https://asphalia-analytics.com/blog/5.17 - Authentication information - OnePager-1 Tue, 04 Nov 2025 12:58:08 +0100 https://asphalia-analytics.com/blog/5.18 - Access rights - OnePager-1 Tue, 04 Nov 2025 12:58:07 +0100 https://asphalia-analytics.com/blog/5.19 - Information security in supplier relationships - OnePager-1 Tue, 04 Nov 2025 12:58:06 +0100 https://asphalia-analytics.com/blog/5.20 - Addressing information security within supplier agreements - OnePager-1 Tue, 04 Nov 2025 12:58:05 +0100 https://asphalia-analytics.com/blog/5.21 - Managing information security in the ICT supply chain - OnePager-1 Tue, 04 Nov 2025 12:58:04 +0100 https://asphalia-analytics.com/blog/5.22 - Monitoring, review and change management of supplier services - OnePager-1 Tue, 04 Nov 2025 12:58:03 +0100 https://asphalia-analytics.com/blog/5.23 - Information security for use of cloud services - OnePager-1 Tue, 04 Nov 2025 12:58:02 +0100 https://asphalia-analytics.com/blog/5.24 - Information security incident management planning and preparation - OnePager-1 Tue, 04 Nov 2025 12:58:01 +0100 https://asphalia-analytics.com/blog/5.25 - Assessment and decision on information security events - OnePager-1 Tue, 04 Nov 2025 12:58:00 +0100 https://asphalia-analytics.com/blog/5.26 - Response to information security incidents - OnePager-1 Tue, 04 Nov 2025 12:58:00 +0100 https://asphalia-analytics.com/blog/5.27 - Learning from information security incidents - OnePager-1 Tue, 04 Nov 2025 12:57:59 +0100 https://asphalia-analytics.com/blog/5.28 - Collection of evidence - OnePager-1 Tue, 04 Nov 2025 12:57:58 +0100 https://asphalia-analytics.com/blog/5.29 - Information security during disruption - OnePager-1 Tue, 04 Nov 2025 12:57:57 +0100 https://asphalia-analytics.com/blog/5.30 - ICT readiness for business continuity - OnePager-1 Tue, 04 Nov 2025 12:57:56 +0100 https://asphalia-analytics.com/blog/5.31 - Legal, statutory, regulatory and contractual requirements - OnePager-1 Tue, 04 Nov 2025 12:57:55 +0100 https://asphalia-analytics.com/blog/5.32 - Intellectual property rights - OnePager-1 Tue, 04 Nov 2025 12:57:54 +0100 https://asphalia-analytics.com/blog/5.33 - Protection of records - OnePager-1 Tue, 04 Nov 2025 12:57:53 +0100 https://asphalia-analytics.com/blog/5.34 - Privacy and protection of PII - OnePager-1 Tue, 04 Nov 2025 12:57:52 +0100 https://asphalia-analytics.com/blog/5.35 - Independent review of information security - OnePager-1 Tue, 04 Nov 2025 12:57:51 +0100 https://asphalia-analytics.com/blog/5.36 - Compliance with policies, rules and standards for information security - OnePager-1 Tue, 04 Nov 2025 12:57:50 +0100 https://asphalia-analytics.com/blog/5.37 - Documented operating procedures - OnePager-1 Tue, 04 Nov 2025 12:57:49 +0100 https://asphalia-analytics.com/blog/6.01 - Screening - OnePager-1 Tue, 04 Nov 2025 12:57:48 +0100 https://asphalia-analytics.com/blog/6.02 - Terms and conditions of employment - OnePager-1 Tue, 04 Nov 2025 12:57:47 +0100 https://asphalia-analytics.com/blog/6.03 - Information security awareness, education and training - OnePager-1 Tue, 04 Nov 2025 12:57:46 +0100 https://asphalia-analytics.com/blog/6.04 - Disciplinary process - OnePager-1 Tue, 04 Nov 2025 12:57:45 +0100 https://asphalia-analytics.com/blog/6.05 - Responsibilities after termination or change of employment - OnePager-1 Tue, 04 Nov 2025 12:57:44 +0100 https://asphalia-analytics.com/blog/6.06 - Confidentiality or non-disclosure agreements - OnePager-1 Tue, 04 Nov 2025 12:57:43 +0100 https://asphalia-analytics.com/blog/6.07 - Remote working - OnePager-1 Tue, 04 Nov 2025 12:57:42 +0100 https://asphalia-analytics.com/blog/6.08 - Information security event reporting - OnePager-1 Tue, 04 Nov 2025 12:57:41 +0100 https://asphalia-analytics.com/blog/7.01 - Physical security perimeters - OnePager-1 Tue, 04 Nov 2025 12:57:40 +0100 https://asphalia-analytics.com/blog/7.02 - Physical entry - OnePager-1 Tue, 04 Nov 2025 12:57:39 +0100 https://asphalia-analytics.com/blog/7.03 - Securing offices, rooms and facilities - OnePager-1 Tue, 04 Nov 2025 12:57:38 +0100 https://asphalia-analytics.com/blog/7.04 - Physical security monitoring - OnePager-1 Tue, 04 Nov 2025 12:57:37 +0100 https://asphalia-analytics.com/blog/7.05 - Protecting against physical and environmental threats - OnePager-1 Tue, 04 Nov 2025 12:57:36 +0100 https://asphalia-analytics.com/blog/7.06 - Working in secure areas - OnePager-1 Tue, 04 Nov 2025 12:57:35 +0100 https://asphalia-analytics.com/blog/7.07 - Clear desk and clear screen - OnePager-1 Tue, 04 Nov 2025 12:57:34 +0100 https://asphalia-analytics.com/blog/7.08 - Equipment siting and protection - OnePager-1 Tue, 04 Nov 2025 12:57:33 +0100 https://asphalia-analytics.com/blog/7.09 - Security of assets off-premises - OnePager-1 Tue, 04 Nov 2025 12:57:32 +0100 https://asphalia-analytics.com/blog/7.10 - Storage media - OnePager-1 Tue, 04 Nov 2025 12:57:31 +0100 https://asphalia-analytics.com/blog/7.11 - Supporting utilities - OnePager-1 Tue, 04 Nov 2025 12:57:30 +0100 https://asphalia-analytics.com/blog/7.12 - Cabling security - OnePager-1 Tue, 04 Nov 2025 12:57:29 +0100 https://asphalia-analytics.com/blog/7.13 - Equipment maintenance - OnePager-1 Tue, 04 Nov 2025 12:57:28 +0100 https://asphalia-analytics.com/blog/7.14 - Secure disposal or re-use of equipment - OnePager-1 Tue, 04 Nov 2025 12:57:20 +0100 https://asphalia-analytics.com/blog/8.01 - Secure disposal or re-use of equipment - OnePager-1 Tue, 04 Nov 2025 12:57:13 +0100 https://asphalia-analytics.com/blog/8.02 - Privileged access rights - OnePager-1 Tue, 04 Nov 2025 12:57:12 +0100 https://asphalia-analytics.com/blog/8.03 - Information access restriction - OnePager-1 Tue, 04 Nov 2025 12:57:11 +0100 https://asphalia-analytics.com/blog/8.04 - Access to source code - OnePager-1 Tue, 04 Nov 2025 12:57:10 +0100 https://asphalia-analytics.com/blog/8.05 - Secure authentication - OnePager-1 Tue, 04 Nov 2025 12:57:09 +0100 https://asphalia-analytics.com/blog/8.06 - Capacity management - OnePager-1 Tue, 04 Nov 2025 12:57:08 +0100 https://asphalia-analytics.com/blog/8.07 - Protection against malware - OnePager-1 Tue, 04 Nov 2025 12:57:07 +0100 https://asphalia-analytics.com/blog/8.08 - Management of technical vulnerabilities - OnePager-1 Tue, 04 Nov 2025 12:57:06 +0100 https://asphalia-analytics.com/blog/8.09 - Configuration management - OnePager-1 Tue, 04 Nov 2025 12:57:05 +0100 https://asphalia-analytics.com/blog/8.10 - Information deletion - OnePager-1 Tue, 04 Nov 2025 12:57:04 +0100 https://asphalia-analytics.com/blog/8.11 - Data masking - OnePager-1 Tue, 04 Nov 2025 12:57:03 +0100 https://asphalia-analytics.com/blog/8.12 - Data leakage prevention - OnePager-1 Tue, 04 Nov 2025 12:57:02 +0100 https://asphalia-analytics.com/blog/8.13 - Information backup - OnePager-1 Tue, 04 Nov 2025 12:57:01 +0100 https://asphalia-analytics.com/blog/8.14 - Redundancy of information processing facilities - OnePager-1 Tue, 04 Nov 2025 12:57:00 +0100 https://asphalia-analytics.com/blog/8.15 - Logging - OnePager-1 Tue, 04 Nov 2025 12:56:59 +0100 https://asphalia-analytics.com/blog/8.16 - Monitoring activities - OnePager-1 Tue, 04 Nov 2025 12:56:58 +0100 https://asphalia-analytics.com/blog/8.17 - Clock synchronization - OnePager-1 Tue, 04 Nov 2025 12:56:57 +0100 https://asphalia-analytics.com/blog/8.18 - Use of privileged utility programs - OnePager-1 Tue, 04 Nov 2025 12:56:56 +0100 https://asphalia-analytics.com/blog/8.19 - Installation of software on operational systems - OnePager-1 Tue, 04 Nov 2025 12:56:55 +0100 https://asphalia-analytics.com/blog/8.20 - Networks security - OnePager-1 Tue, 04 Nov 2025 12:56:54 +0100 https://asphalia-analytics.com/blog/8.21 - Security of network services - OnePager-1 Tue, 04 Nov 2025 12:56:53 +0100 https://asphalia-analytics.com/blog/8.22 - Segregation of networks - OnePager-1 Tue, 04 Nov 2025 12:56:52 +0100 https://asphalia-analytics.com/blog/8.23 - Web filtering - OnePager-1 Tue, 04 Nov 2025 12:56:51 +0100 https://asphalia-analytics.com/blog/8.24 - Use of cryptography - OnePager-1 Tue, 04 Nov 2025 12:56:50 +0100 https://asphalia-analytics.com/blog/8.25 - Secure development life cycle - OnePager-1 Tue, 04 Nov 2025 12:56:49 +0100 https://asphalia-analytics.com/blog/8.26 - Application security requirements - OnePager-1 Tue, 04 Nov 2025 12:56:48 +0100 https://asphalia-analytics.com/blog/8.27 - Secure system architecture and engineering principles - OnePager-1 Tue, 04 Nov 2025 12:56:47 +0100 https://asphalia-analytics.com/blog/8.28 - Secure coding - OnePager-1 Tue, 04 Nov 2025 12:56:46 +0100 https://asphalia-analytics.com/blog/8.29 - Security testing in development and acceptance - OnePager-1 Tue, 04 Nov 2025 12:56:45 +0100 https://asphalia-analytics.com/blog/8.30 - Outsourced development - OnePager-1 Tue, 04 Nov 2025 12:56:44 +0100 https://asphalia-analytics.com/blog/8.31 - Separation of development, test and production environments - OnePager-1 Tue, 04 Nov 2025 12:56:43 +0100 https://asphalia-analytics.com/blog/8.32 - Change management - OnePager-1 Tue, 04 Nov 2025 12:56:42 +0100 https://asphalia-analytics.com/blog/8.33 - Test information - OnePager-1 Tue, 04 Nov 2025 12:56:41 +0100 https://asphalia-analytics.com/blog/8.34 - Protection of information systems during audit testing - OnePager-1 Tue, 04 Nov 2025 12:56:40 +0100