Insights
Insights on governance, risk and operational resilience
Practical articles for the people who run risk, compliance, continuity and incident programmes in regulated organisations.
Articles
6 min read
A business impact analysis that people actually use
How to make a business impact analysis useful beyond the audit file - start from services and processes, set RTO and RPO, map dependencies, keep it live and connect it to recovery plans and exercises.
6 min read
NIS2 incident reporting: 24 hours, 72 hours, one month
How the staged NIS2 reporting works, what a significant incident generally means, and how to prepare classification criteria, roles, templates and rehearsals before you need them.
6 min read
The DORA register of information, without the spreadsheet drift
What the DORA register of information is, what it records about your ICT third-party arrangements, where registers usually go wrong, and how a connected model keeps it accurate.
See ILSERIS in action.
A focused walkthrough, built around your regulatory landscape and operating model.