- NIS2
Scope, Article 21 measures, Article 23 reporting, Article 20 management accountability and Romanian implementation of the NIS2 Directive.
- DORA
DORA's five pillars, applicability since 17 January 2025, and how CYBERVETTER helps financial entities and ICT providers build evidence.
- ISO/IEC 27001
What ISO/IEC 27001:2022 requires, the 93 Annex A controls, the Stage 1 and Stage 2 certification path, and its relationship to NIS2.
- Cyber Resilience Act
Who the Cyber Resilience Act catches, what it requires, the 2026 reporting deadline and how CYBERVETTER helps manufacturers prepare.
- GDPR
The practical GDPR obligations that organisations most often get wrong: Article 30 records, DPIAs, lawful basis, international transfers and 72-hour breach notification.
- AI Act
The EU AI Act risk-tier structure — prohibited, high-risk, transparency-only and general-purpose AI — and the key dates for compliance.
- PCI DSS
PCI DSS v4.0.1: scope reduction first, the future-dated requirements that became mandatory on 31 March 2025, and how to reduce compliance cost and risk.