Blog

Apr

Not All That Glitters Is Gold: Pre-Employment Screening

by Christoph Zajic

The Austrian Network and Information Systems Security Act (NISG) already requires operators to ensure that employees are trustworthy, aware of their responsibilities, and qualified for their assigned roles.

Mar

Ransomware Attacks as Data Protection Incidents: GDPR Requirements and Reporting Obligations

by Dzevad Mujezinovic

Ransomware attacks reached a new record high in 2024, threatening organizations worldwide. Critical sectors such as healthcare and public authorities remain prime targets, but small and medium-sized enterprises (SMEs) are increasingly affected as well. Cybercriminals are increasingly stealing data to extort ransom payments.

Feb

Responsible Disclosure: Handling Security Vulnerabilities Responsibly

by Yuri Gbur, Sandro Einfeldt, Fabian Mittermair

Software vulnerabilities are inevitable—but how they are handled makes all the difference. Responsible Disclosure helps ensure that security flaws are remediated before they can be exploited by attackers.

Jan

Cybersecurity Outlook 2025: Process Consulting

by Christoph Zajic, Process Consulting

2024 brought several major developments in cybersecurity—from the Cyber Resilience Act entering into force to the CrowdStrike incident during the summer. Now that we have entered 2025, the question is: What's next?