Writing
Notes from the field.
Infrequent, long-form, opinionated. Mostly on offensive security, NIS2, SOC operations, and the business of working as an independent consultant.
NIS2 for mid-market Dutch companies: what to actually do in the first 90 days
The Dutch Cyberbeveiligingswet applies whether you've had time to read it or not. A practical sequence for the first three months, from a consultant who has walked a handful of organisations through it already.