Our Blog

Compliance & Regulation

Managing Supply-Chain and Third-Party Cyber Risk Under NIS2

NIS2 makes supply-chain security a board-level obligation. This guide explains what Article 21 actually requires on third-party risk, how to build a practical TPRM programme — from supplier tiering to contractual clauses and incident coordination — and what Luxembourg organisations should do now.

Philippe Parage · 4 months ago

13 min read

Read more about Managing Supply-Chain and Third-Party Cyber Risk Under NIS2

Security Operations

Managed Detection & Response and SOC-as-a-Service for Luxembourg SMEs

What a Security Operations Centre and Managed Detection & Response service actually do, why running one in-house is beyond the reach of most SMEs, and how to choose a provider that genuinely fits a Luxembourg business — including how MDR supports NIS2 incident-reporting obligations.

Philippe Parage · 4 months ago

14 min read

Read more about Managed Detection & Response and SOC-as-a-Service for Luxembourg SMEs

Compliance & Regulation

EU AI Act Compliance: A Practical Guide for Businesses Deploying AI

EU AI Act enforcement powers, GPAI duties, and transparency rules apply from 2 August 2026. Annex III high-risk rules follow on 2 December 2027 and product-embedded high-risk rules on 2 August 2028. This guide explains what Luxembourg businesses should do now.

Philippe Parage · 4 months ago

13 min read

Read more about EU AI Act Compliance: A Practical Guide for Businesses Deploying AI

Technology & Innovation

The AI Paradox of 2026: How European Businesses Can Harness AI Without Becoming Its Next Victim

AI is simultaneously the greatest productivity leap of the decade and the most dangerous new weapon in every attacker's arsenal. For Luxembourg businesses navigating this double-edged reality, the question is no longer whether to adopt AI, but how to do so without exposing yourself to the very threats AI is amplifying. This guide covers the opportunities, the risks, and a practical framework for safe adoption.

Philippe Parage · 4 months ago

16 min read

Read more about The AI Paradox of 2026: How European Businesses Can Harness AI Without Becoming Its Next Victim

Compliance & Regulation

ISO 27001 Certification in Luxembourg: A Practical Guide for SMEs

A practical, step-by-step guide to ISO/IEC 27001 certification for Luxembourg SMEs. Covers what an ISMS involves, the four Annex A control themes, the certification journey from gap analysis to surveillance audits, realistic effort and timeline expectations, and the most common pitfalls to avoid.

Philippe Parage · 4 months ago

14 min read

Read more about ISO 27001 Certification in Luxembourg: A Practical Guide for SMEs

Compliance & Regulation

The 2026 Regulatory Collision: Navigating NIS2, DORA, and the EU AI Act at Once

Luxembourg organisations face NIS2 implementation, active DORA supervision and the EU AI Act’s staged 2026–2028 timeline at once. Here is how to prioritise the overlapping controls without duplicating work.

Philippe Parage · 5 months ago

14 min read

Read more about The 2026 Regulatory Collision: Navigating NIS2, DORA, and the EU AI Act at Once

Technology & Innovation

Best Open-Source Cybersecurity Tools for 2026: What We Use

A practical 2026 guide to Wazuh, MISP, MONARC, Arkime, Suricata and Greenbone/OpenVAS: where each tool fits, what it does not replace and what operating it really requires.

Philippe Parage · 7 months ago

11 min read

Read more about Best Open-Source Cybersecurity Tools for 2026: What We Use

Security Operations

Social Engineering in the Greater Region: Attack Patterns We've Observed

An original threat intelligence perspective on social engineering attack patterns observed in Luxembourg and the Greater Region. Covers phishing trends, vishing techniques, pretexting scenarios, physical social engineering, and multilingual attack vectors.

Philippe Parage · 7 months ago

9 min read

Read more about Social Engineering in the Greater Region: Attack Patterns We've Observed

Compliance & Regulation

DORA Resilience Testing: Where Exercises Fit and How TLPT Differs

Choose exercise support around the evidence your resilience programme needs. Distinguish scenario-based exercises from TLPT and scope objectives, observations and limitations.

Philippe Parage · 7 months ago

8 min read

Read more about DORA Resilience Testing: Where Exercises Fit and How TLPT Differs