Cybersecurity in practice

What did a pentester find within 30 minutes of entering the network? Common organisational mistakes

What can a professional tester discover in the first 30 minutes? Explore common penetration-test findings and learn how to improve organisational resilience.

10 common findings in a NIS2 compliance audit

Organisations entering an audit usually have a convincing deployment list: firewalls, endpoint protection, backups and access control. Yet NIS2 gap analysis rarely ends with a missing device. Processes, evidence and incident response diverge. Explore ten areas where audits commonly reveal the difference between implementation and the ability to demonstrate it.

What does a cyberattack on a hospital subject to NIS2 look like?

At 07:10, the morning shift starts normally. At 08:25, a doctor cannot open a patient record; 15 minutes later registration fails; at 09:05, an administrator establishes that the intrusion began the previous night. Staff see the hospital attack only now, at the registration desk and in a consulting room without test results, after the attacker has moved through the network for many hours.

What does a cyberattack on a city council look like? An incident scenario, step by step

What does an attack on a city or municipal office involve? Explore a realistic incident scenario, its effect on public services and the role of SOC and security monitoring.

What does a security audit involve, step by step?

Is an audit just running a vulnerability scanner? A professional IT security audit is a diagnostic process leading to a risk map and action plan, with scanning as one tool. Each stage has an agreed scope and roles, so the organisation knows the outcome in advance. Explore the sequence from the opening meeting to a prioritised report.

A cyberattack on a manufacturer: from phishing to halted production

What does an attack on a manufacturing company involve? Explore a realistic scenario and how security monitoring and SOC help limit impact.

What is the cost of having no 24/7 security monitoring?

A cyberattack costs more than lost data. Explore the costs of missing 24/7 security monitoring and why detection time determines the scale of losses.

Registering an NIS2-covered entity — what goes in item 16?

Management receives notice of entry in Poland’s National Cybersecurity System register and a request to complete details. One field asks about an external-provider contract. Item 16 concerns an existing contract; it does not require one to be signed. The entry records contract status, while incident-handling capability depends on people, process and prompt response. Learn what to enter and when a provider helps.

Local Cybersecurity Centres for municipalities: how to build one together and sustain it after grant funding?

What is a Local Cybersecurity Centre, who can establish one, and how should SOC delivery, funding and five years of post-project operation be planned?