Security Briefings for CISOs & Leaders
Board-ready signal without the doomscrolling. Weekly rollups and curated context across breaches, vuln exploitation, and regulatory pressure.
Security awareness people actually do, with a register you can show
Every Wednesday, five real cases from last week in security. About five minutes. Each person's completion is recorded for your organisation, and the training register comes out as CSV or PDF with the regulatory mapping on the cover.
Real incidents from the previous week. Judgment questions, a verdict and a short teaching note after each answer. The questions are written by AI. When a quiz is published without a person reviewing it, its introduction says it was generated by AI.
Who was eligible, who completed, when, and the score. Administrators see completion. Which answers someone got wrong stays with that person.
A quarterly executive brief for the people who oversee the company: governance decisions, not technical trivia, recorded separately.
- NIS2 Art. 21(2)(g) Basic cyber hygiene practices and cybersecurity training, as part of the risk-management measures.
- NIS2 Art. 20(2) Members of management bodies must follow training, and are encouraged to offer similar training to employees.
- DORA Art. 13(6) ICT security awareness programmes and digital operational resilience training for staff and the management body.
The register documents training activity that supports evidence for these obligations. Whether that activity is sufficient is a judgement for your organisation and its supervisor. Nothing here certifies compliance.
Data lives in the EU. Sweden first: pilots with Swedish organisations, in English, priced per seat.
What you’ll find
Start with this
Latest published roundup.
🔓 OpenSSH 'SSHole' (CVE-2026-123158) was exploited within hours of disclosure, granting root access on Alpine Linux and other musl-based systems — patch immediately. 🤖 The ARTEX...