Insights
Notes on things we keep being asked.
Occasional and substantial rather than frequent and thin.
0102
The EU AI Act deadline moved. Here is what did not.
What the Digital Omnibus changed, what is already in force, and why inventory and classification remain the work to start now.
22 September 2026 · 7 min read
What an ISO 27001 auditor actually asks for.
The difference between a policy pack and a working management system, and the evidence Stage 1 and Stage 2 expose.
22 September 2026 · 7 min read
Next step
Start with a conversation, not a proposal.
Thirty minutes. We will tell you what we would do, what it would take, and whether we are the right firm for it.