NIS25 min read
NIS2 in Romania: the complete 2026 guide for companies
Everything a company in Romania needs to know about NIS2 in 2026: scoping, the two categories of entities, obligations towards DNSC, Art. 21 measures and penalties.
18 Oct 2026
Defneo blog
Security, NIS2 and AI governance, explained in practice
Guides for IT managers, CISOs and leadership: legal obligations, technical controls and the threats that matter in 2026.
- NIS24 min read
NIS2 and management accountability: what directors must do
NIS2 puts cybersecurity on the board agenda. What Art. 20 concretely means for directors and executives, which training is required and what evidence to keep.
18 Oct 2026
- AI governance5 min read
EU AI Act: the compliance timeline for companies (2025–2027)
The EU regulation on artificial intelligence applies in stages. Here are the dates that matter, what a company that only uses AI must do, and where to start.
18 Oct 2026
- AI governance5 min read
AI governance in practice: inventory, policy and control
AI arrived in the company before the rules did. A practical guide to finding out which systems you use, which data flows into them and who is accountable for the results.
18 Oct 2026
- Threats5 min read
Phishing in 2026: AI, ClickFix, deepfakes and why passkeys matter
Spelling mistakes no longer give a phishing email away. Here are the techniques that work today and the controls that stop them even when someone clicks.
18 Oct 2026
- NIS25 min read
DNSC notification step by step: registration, deadlines, common mistakes
The two notifications NIS2 requires towards Romania's DNSC — entity registration and significant incident reporting — explained step by step, with the directive's deadlines.
11 Sept 2026
- NIS24 min read
NIS2 Art. 21: the 10 measures, translated into technical controls
What “risk management”, “supply chain security” or “cyber hygiene” concretely mean on a real server — measure by measure, with the evidence you should keep.
2 Sept 2026
- Best practices5 min read
Linux server hardening in 2026: the CIS checklist explained
The 20 CIS controls that really matter, how to verify them automatically and what evidence to keep for audit.
28 Aug 2026
- Quantum5 min read
Post-quantum cryptography for IT managers: what to do this year
No physics. Inventory, prioritisation, hybrid TLS and the questions to ask your vendors.
14 Aug 2026
- Threats5 min read
Anatomy of a ransomware attack in Romania: from VPN to ransom
A stage-by-stage reconstruction of a typical attack, built from public patterns, and the 4 controls that would have stopped it.
7 Aug 2026
- Best practices5 min read
CrowdSec + Traefik: IDS/IPS for web apps, no appliance
Full configuration, detection scenarios, community blocklists and how to avoid false positives.
31 Jul 2026