Speaker: Christian Biehler Many SMEs in Germany walk a fine line between IT security and compliance. The need for effective, pragmatic protection often clashes with strict regulatory mandates such as NIS-2, DORA, and others. Managing -and above all, evidencing -IT security and operational resilience remains a formidable organizational and technical challenge.

We show that for small and medium-sized businesses, aligning with ISO 27001 is the sensible approach. Rather than chasing every new regulatory requirement, the standard provides a solid foundation on which genuine IT security can take shape -while simultaneously meeting all compliance obligations.

Structured capture and cross-referencing of relevant business aspects hit their limits in Excel and Word. Large GRC platfo ...