IA11 min
EU AI Act: A Practical Guide for Spanish Companies in 2026
Prohibited practices and AI literacy already apply; high-risk obligations move to 2027–2028 under the Digital Omnibus. How to classify your systems and what to do now.
Feed by theme
Archive
Industria/OT-NIS202
NIS2 in the industrial sector: what the directive requires of factories and OT environments in Spain
What NIS2 requires of manufacturers and plants with OT environments in Spain: affected sectors, notification deadlines, Article 21 measures, and the state of transposition.
17 min
Complete NIS2 Compliance Guide for Spanish Companies
NIS2 has still not been transposed in Spain and remains subject to a European Commission infringement procedure. What companies should do in the meantime and how to prepare.
15 min
Sector público-ENS02
ENS for suppliers to the Spanish Administration: what Royal Decree 311/2022 requires from your company as a subcontractor
What Royal Decree 311/2022 requires from companies providing services to the Spanish Administration, directly or as subcontractors, and how to demonstrate compliance.
10 min
ENS High vs ENS Medium: a practical guide to choosing the right category
The difference between ENS Medium and ENS High is strategic, not just technical. We break down the categorisation criteria, real cost, audit requirements and common mistakes.
10 min
Financiero-DORA02
DORA Register of Information: how to complete the template under Regulation (EU) 2024/2956
A practical guide to the DORA Register of Information: templates B_01-B_99, xBRL-CSV format, the 2026 timeline and steps to comply with Art. 28.
11 min
DORA: The 5 Most Common Mistakes in the ICT Register of Information and How to Avoid Them
After the first complete annual cycle of DORA's ICT Register, we review the five mistakes that generate the most supervisory requests and how to correct them before the 2027 submission.
14 min
Pyme02
Cybersecurity for SMEs in Spain: where to start without a large-enterprise budget
A practical, source-backed guide for a Spanish SME to prioritise cybersecurity without a large-enterprise budget.
9 min
Ransomware in 2026: trends, tactics and how to protect yourself
Ransomware in 2026: encryption-free extortion, RaaS fragmentation after LockBit's takedown and supply-chain attacks. Verified data and practical defence.
12 min
Ofensiva01
IA01
