Complass
Whitepapers
Free whitepapers on NIS2, the Cyber Resilience Act and other frameworks, sorted by topic and audience – as a PDF in exchange for your email address, without advertising.
Who are you looking for?
Getting started: what applies to my company?
For every sector, as a first step. 9 whitepapers
-
NIS2 for companies in every sector: directly in scope or via your customers
-
The management body is liable: what § 38 BSIG requires from managing directors
-
When it has happened: reporting duties under NIS2, the CRA and the GDPR in one flow
-
AI Act: what companies using AI need to do now
-
The AI inventory: the foundation for the AI Act in your company
-
Whistleblower protection: setting up and running an internal reporting office under the HinSchG
-
NIST CSF 2.0: a profile that customers and insurers understand
-
Complass: cybersecurity and compliance in one place
-
Complass – Features and Connectors
Manufacturers of products
Hardware, software, machinery, radio equipment and medical devices. 9 whitepapers
-
Cyber Resilience Act for manufacturers of hardware and software
-
PSIRT intake: accepting vulnerability reports under the CRA
-
Secure development for manufacturers
-
Machinery Regulation: cybersecurity becomes part of machine safety
-
Radio Equipment Directive: cybersecurity for connected radio equipment until the CRA
-
Data Act for manufacturers and operators of connected products: data access, contracts and cloud switching
-
Cybersecurity for medical devices (MDR/IVDR)
-
Product safety under the GPSR: what manufacturers and distributors must do today
-
Secure software development under NIST SSDF and OWASP SAMM: the practical route to the CRA
Operators and critical infrastructure
Plants, OT and business continuity. 6 whitepapers
-
German KRITIS Umbrella Act: resilience of critical facilities
-
IEC 62443 for asset owners, integrators and manufacturers
-
Business continuity management (BCM)
-
Asset inventory, SBOM and vulnerability management: know what runs, and prove what you do
-
Licence and contract register: deadlines in view, evidence at hand and licensed reconciled against used
-
NIS2 and the Energy Industry Act for municipal utilities: one company, two legal regimes
Suppliers and service providers
Meeting customer requirements and proving it. 8 whitepapers
-
Your customer's security questionnaire: NIS2 for suppliers and service providers
-
TISAX® for automotive suppliers and service providers
-
ISO 27001: the road to certification – for companies in every sector
-
NIST SP 800-53 and SP 800-171: when US customers ask about controls
-
Internal audit and management review under ISO 27001
-
Access reviews with Entra ID and GitHub: who may do what, who reviewed it and whether the removal was carried out
-
Automatic evidence from Microsoft 365 and GitHub: checked daily, read-only, without names
-
Answering the cyber insurance questionnaire from existing evidence
Sectors and data protection
Financial sector, healthcare, life sciences and GDPR. 5 whitepapers
-
DORA: digital operational resilience for financial entities and their ICT providers
-
Computerised systems in GxP environments: Annex 11, Part 11 and the risk-based approach
-
GDPR basics: organising data protection you can demonstrate
-
Privacy in day-to-day operations
-
The Swiss Federal Act on Data Protection (FADP): what applies beyond the GDPR
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.