Skip to main content

Hodeitek's cybersecurity resource center

One entry point to 24 technical resources on NIS2, DORA, ENS, supply chain and threat intelligence. Search any topic, or jump straight into one of the five worlds.

Search across all resources

Filter by type, regulatory framework, industry or level, or click any topic on a card. Results update instantly.

24 results

Whitepaper
GeneralGRC / Compliance
OT & Industrial

OT cybersecurity for plant management: a 25-question self-assessment and a 12-month roadmap

A guide for whoever is accountable for keeping the line running: plant management, maintenance and process engineering. It includes a 25-question self-assessment in five blocks (inventory, network and segmentation, access, detection and response, recovery and suppliers), a 12-month roadmap ordered by risk of downtime, a short explanation of what IEC 62443 and NIS2 ask for, and the facts on the SPRI Industrial Cybersecurity 2026 grant, subject to the rules of the call. October 2026 edition, version 1.0.

6
Read more
Whitepaper
AdvancedSOC / Red Team
Pentesting

Sample pentest report: what the deliverable looks like, with fictional data

An illustrative, fictional penetration test report: executive summary, scope, methodology, six findings with CVSS v3.1 scores and vectors, a prioritised remediation plan and a reading guide. The company, systems and dates are invented; it does not describe any real client or system.

6
Read more
Whitepaper
IntroductorySOC / Red Team
IA & Seguridad

Guide: reducing alert fatigue in a security team

A five-step method to give a security team its hours back: a baseline before changing anything, an owner for every rule, noise reduction at the source, correlation and context-based prioritisation. It explains where AI helps and where it does not, and closes with an improvement loop and a checklist. It includes no savings figures: every improvement is measured in your own environment.

4
Read more
Whitepaper
IntroductorySOC / Red Team
SOC & Detección

SOC readiness and coverage checklist

A list to audit detection and response capability with evidence: governance and scope, telemetry sources, time windows, detection, triage and response, notification and compliance, and improvement and reporting. Each item is marked Yes, Partial, No or Not applicable, with its evidence; a Yes without evidence counts as Partial. It works for in-house, external or mixed SOCs.

4
Read more
Whitepaper
IntroductoryGRC / Compliance
TPRM

Reference architecture for TPRM

A generic layered model for a multi-tenant web application for third-party risk management (TPRM): principles, a logical diagram, reasoned decisions per layer and a secure development lifecycle (SSDLC) checklist based on NIST SSDF. It is a reference built on public standards; it does not describe the design of any product or client.

4
Read more
Whitepaper
IntroductoryAll profiles
Automatización

Automation playbook: what to automate first

A six-step method to decide what to automate first: a list of candidate processes, return and effort scoring, a matrix, a flow with a human checkpoint, a small build with logging, and measurement. It includes security operations examples, common mistakes and a checklist before putting a flow into production. The method works for any area.

3
Read more
Whitepaper
GeneralAll profiles
Concienciación

Anti-phishing awareness kit

Material to launch your own awareness campaign: a guide to warning signs for employees, poster texts, a launch email template, a four-week campaign plan and the technical controls that complement it, such as MFA and email authentication. It does not include phishing simulations; consult your legal advisers before running any.

4
Read more
Article
GeneralGRC / Compliance
Pyme

Cybersecurity for SMEs in Spain: where to start without a large-enterprise budget

A practical, source-backed guide for a Spanish SME to prioritise cybersecurity without a large-enterprise budget.

9 min2026-09-27
Read more
Article
GeneralGRC / Compliance
Financiero-DORA

DORA Register of Information: how to complete the template under Regulation (EU) 2024/2956

A practical guide to the DORA Register of Information: templates B_01-B_99, xBRL-CSV format, the 2026 timeline and steps to comply with Art. 28.

11 min2026-09-27
Read more
Newsletter

Regulation and threats, in one monthly email

A monthly digest on NIS2, DORA and ENS, and the threats that matter most to Spanish businesses. No daily noise.

1 email a month
  • One email a month, no more
  • NIS2, DORA and ENS updates in plain language
  • Real threats affecting Spanish businesses
  • Zero spam, unsubscribe anytime
Interests (optional)

Want to talk to an expert?

Request a meeting with our cybersecurity team; the first meeting after your request is at no cost.

Request a meeting