Articles related to regulatory and legal compliance.
DORA is the EU's regulation for ICT operational resilience in financial services. Understand its five pillars, business continuity requirements, how it differs from NIS2, and a step-by-step compliance roadmap.
The NIS2 Directive significantly expands EU cybersecurity requirements — covering more sectors, introducing management liability, and mandating business continuity. Learn who's affected, what's required, and how to prepare.
Everything you need to know about ISO 22301 — the international standard for Business Continuity Management Systems. Covers all key requirements, the certification process, and how it relates to NIS2, ISO 27001, and other frameworks.
Across multiple standards and regulations, Sohvo serves as a resilience enabler: • It operationalizes ISO 22301 and supports ISO 27001 Annex A.17. • It helps organizations meet NIS2’s continuity and risk management requirements. • It aligns with the CRA both by supporting customers’ resilience efforts and by being developed with CRA obligations in mind. While Sohvo does not replace the need for a full Information Security Management System or cybersecurity controls, it addresses one of the hardest parts of compliance: keeping business continuity data structured, updated, and audit-ready.