Plain-English notes on the rules behind our audits.

Short articles from AuditGlass and the expert panel: what a rule actually asks of you, and the evidence that answers it.

EU AI Act5 min read

Using AI tools at work? Start with an inventory.

Before any AI Act question, know which AI tools your people already use, for what, and with whose data. A one-page inventory is where every answer starts.

Cyber basics4 min read

Multi-factor on the shared inbox: the ten-minute fix.

One password passed between committee members is an easy way in. How to switch on MFA for a shared mailbox without locking anyone out.

Supplier assurance6 min read

A customer sent you a security questionnaire. Now what?

NIS2 and DORA usually reach smaller firms through their customers’ contracts. What they tend to ask, and the evidence that answers it.