Explore cyber compliance blogs

Discover a curated collection of blogs covering cybersecurity frameworks, industry updates, and expert tips. Dive into content designed to inform and guide you in mastering compliance and security.

Explore framework collections

Latest articles

28.05.2026

Introducing workflows in Cyberday

Workflows are a clearer way to find everything related to one theme - risks, awareness, incidents, assets - on a hub, with the metrics that matter and the documentation / tasks / reports you need.

Why use a management system for compliance?

How AI Agents are changing information security management

The EU AI Act: What it means and how to implement it

Frameworks

Browse all articles ->

The EU AI Act: What it means and how to implement it

EU Artificial Intelligence Act (AI Act) compliance guide: map roles, manage risk and governance, classify high-risk AI, meet transparency and CE marking duties.

EU AI Act and ISO 42001: differences, overlap, and how to use them together

EU AI Act vs ISO 42001: learn the key differences, where they overlap, and how to use both to build practical, compliant AI governance.

ISO 27001 and GDPR: How global standard supports General Data Protection Regulation

In this blog, we'll quickly go over ISO 27001 standard and GDPR, look at their similarities, and discuss how ISO 27001 can be useful towards GDPR compliance. We will also take a peek to GDPR and ISO 27701 cooperation.

Compliance & Security

Browse all articles ->

AI & human: What are different levels of collaboration?

Cybersecurity has always been a complex and demanding area, but now AI is starting to reshape not just how we do the work, but also who does what. Where should humans focus, as AI takes on more responsibility?

What AI can do for compliance (and why it can't solve it alone)

AI is transforming compliance, but it can’t replace human judgment, accountability, or governance. Learn what AI can and cannot do in compliance and how to use it effectively.

Risk management: how other ISMS key areas provide input?

An ISMS only supports risk management if it’s actively used. When processes like incident management, change management, continuity planning, and continuous improvement are run in practice, they continuously generate input.

ISMS

Browse all articles ->

Why use a management system for compliance?

A management system helps organizations address compliance in a systematic, consistent manner with the support of automated processes. The system ensures that the work is continuous and documented, and supports compliance efforts.

Streamline ISO 27001 compliance with AI: Building the ISMS baseline

How to use AI to build a tailored ISMS baseline in minutes, and get you to a flying start on ISO 27001 work? By using AI in a controlled way, you won't degrade quality but will save your time on implementing security - not writing documents.

What is an ISMS? A guide to information security management systems

Learn what ISMS is, why it matters, and how to implement an ISMS step-by-step. See how ISO 27001 and NIS2 fit into your information security management system.

Partner portal

Browse all articles ->

AI won't replace cybersecurity consultants (and why it makes them more valuable)

AI is cutting the repetitive side of compliance work. For cybersecurity consultants, that means more time for advisory work and new ways to scale.

How cyber advisors can scale up without hiring a large team

Growing cyber consultancy doesn't always require adding headcount. With Cyberday, managing multiple customers efficiently is easier and you can deliver consistent results.

What is a vCISO? Understanding the role of virtual CISO

What is a vCISO, what they do, and why the virtual CISO model is growing fast among companies and cybersecurity consultants.

News and trends

Browse all articles ->

AI won't replace cybersecurity consultants (and why it makes them more valuable)

AI is cutting the repetitive side of compliance work. For cybersecurity consultants, that means more time for advisory work and new ways to scale.

Cyberday AI Assistant, framework comparisons & Mass-editing: Cyberday product and news summary 9/2025 🛡️

This is the September news and product review from Cyberday and also a summary of the latest admin webinar. Read about Cyberday's new AI Assistant, how frameworks compare and what is on development roadmap.

NIS2 delays, healthcare breaches & improved Trust Center: Cyberday product and news summary 5/2025 🛡️

This is the May news and product review from Cyberday and also a summary of the latest admin webinar. Read about NIS2 delays, recent cyberattacks as well as recent and future development on Cyberday.

Product updates

Browse all articles ->

10 new frameworks available: National NIS2 frameworks, CAF 4.0, Saudi PDPL and more

Cyberday adds Saudi PDPL, CAF 4.0, MSBFS regulations, and NIS2 national laws for Portugal, Slovenia, Slovakia, and Åland. Expand your compliance coverage today.

New global and national frameworks now available in Cyberday

Cyberday adds new frameworks to support global cybersecurity compliance, including the CER Directive, NEN 7510, China Cybersecurity Act, and national NIS2 implementations in 5 countries.

Introducing: Cyberday’s new AI Assistant 🚀

Introduction to the capabilities of Cyberday's new AI Assistant, that will be published inside the app still during this month.

Company updates

Browse all articles ->

Introducing workflows in Cyberday

Workflows are a clearer way to find everything related to one theme - risks, awareness, incidents, assets - on a hub, with the metrics that matter and the documentation / tasks / reports you need.

Compliance is mission-critical – not a once-a-year project

Our 2025 user survey shows compliance is no longer a once-a-year project. Learn how organizations now treat compliance as mission-critical infrastructure embedded in daily operations.

Cyberday Fall 2025 Round-Up: Navigating growth

Cyberday’s 2025 fall roundup highlights major growth, new AI-powered security tools, expanded compliance frameworks, a new HQ, and key event launches — setting the stage for an ambitious 2026.

Framework collections

Explore framework collection

ISO 27001

ISO 27001 is the global standard for establishing, implementing, and maintaining an Information Security Management System (ISMS). This framework helps organizations manage risks to their data security, ensuring confidentiality, integrity, and availability.

Connected blogs:

10 things I wish I knew: Starting your ISO 27001 project on the right track

ISO 27001 and ISO 9001: Differences, how they work together and benefits of combining

ISMS implementation: comparison of documents, wikis, ISMS tools and GRC

NIS 2 (Network and Information Security Directive 2)

NIS 2 expands on the original NIS Directive, setting updated cybersecurity requirements for critical infrastructure sectors across the European Union. It emphasizes resilience, incident reporting, and supply chain security.

Connected blogs:

Continuity management in NIS2: Benchmark measures for business continuity and backups with ISO 27001

Who does NIS2 apply to? Scope and required security measures explained.

Navigating the Cybersecurity Maze: Master NIS2 with the help of ISO 27001

Explore framework collection