Technical guides, standards & comparisons
An explained library of compliance rules, assurance standards and architectures. Primary sources, practical trade-offs and realistic limitations.
These pages help with initial understanding and scoping. They are not legal advice, certification audits or applicability guarantees.
Security & assurance
NIS2 vs SOC 2: legal duties or assurance report?
Often requested in supplier assessments, but very different in legal nature, audience and scope.
Read the guide Security & assuranceISO 27001, CyberFundamentals, SOC 2: which assurance route?
A management-system certificate, a Belgian cyber assurance framework and a controls attestation report serve different purposes.
Read the guide Security & assuranceSOC 2 Type 1 vs Type 2: at a point in time or over a period?
Report type changes what customers can reasonably infer about control design and operation.
Read the guide Security & assuranceNIS2 vs DORA: cybersecurity and financial-sector resilience
Sector scope and the relationship between laws matter as much as technical controls.
Read the guide Security & assuranceCertification, attestation and internal audit: which term is accurate?
Readiness support does not carry the same assurance as an independent third-party assessment.
Read the guide Security & assuranceFirewalls, VLANs and Wi-Fi: security without disruption
Internet connectivity alone does not guarantee a stable, well-controlled business network.
Read the guideData & privacy
GDPR and RGPD: one EU regulation, national rules still matter
RGPD is the French acronym and GDPR the English acronym for the same EU Regulation 2016/679, not two different certifications.
Read the guide Data & privacyISO/IEC 27701 and GDPR: management system or legal duty?
ISO/IEC 27701:2025 is a standalone privacy information management standard; it does not replace GDPR.
Read the guide Data & privacyAI Act and GDPR: two assessments for one AI project
An AI system using personal data must consider both AI-specific obligations and privacy law.
Read the guide Data & privacyEmail marketing: consent, unsubscribe and deliverability
Technical deliverability and lawful permission to send are two different questions.
Read the guidePayments
Accessibility
Integration & invoicing
CRM, CPQ & sales
CRM, CPQ and ERP: three roles in the sales lifecycle
These platforms complement one another but do not always share the same system of record.
Read the guide CRM, CPQ & salesProduct configuration and CPQ: rules, compatibility and pricing
When a product catalogue becomes complex, rules need to be explicit, versioned and testable.
Read the guide CRM, CPQ & salesQuote-to-Cash vs Order-to-Cash: where to automate?
Related, but not identical, process chains: the boundary shapes ownership and integration.
Read the guide CRM, CPQ & salesProduct Owner, Business Analyst, architect: who does what?
Projects progress faster when priorities, business rules and technical decisions have clear owners.
Read the guideOperations & continuity
BCP, DRP, RTO and RPO: what ISO 22301 addresses
A successful backup job is not a business continuity plan.
Read the guide Operations & continuityITIL, ISO 20000-1 and NIST CSF: service operations vs security
These frameworks help organise IT work, but they address different outcomes.
Read the guide Operations & continuitySPF, DKIM, DMARC: why email delivery fails
DNS authentication proves aspects of email origin; it does not promise inbox placement.
Read the guide