Knowledge
Knowledge that makes your IT make sense.
No jargon, no sales talk, just clear pieces on secure, reliable IT. Written the way we’d explain it at your table.
Free · about 5 minutes · an instant, personal picture of where you stand.
Who owns the personal data in your business?
Every business has a privacy statement. Far fewer know who actually owns the data that statement is about.
Read more · 6 min read- Clarity & control
Cooling systems online: what the FBI warning means for your business
The FBI warned supermarkets about exposed cooling systems online. What does this mean for your wholesale, production or logistics business, and what now?
· 5 min read - People & behaviour
Why a New Employee's First Day Is Already a Security Risk
Many SMEs arrange access for new employees ad hoc. Read why that is a risk and how to organise it more sensibly, and demonstrably.
· 6 min read - People & behaviour
Why employees bypass security, and what it tells you
The Dutch intelligence agency AIVD warns of the 'security-avoiding insider'. Not malicious, but a signal policy doesn't fit daily work. Here's how to respond.
· 5 min read - Secure & resilient
What Runs Unnoticed on Your Workplace Devices, You Cannot Secure
Two million PCs ran a vulnerable updater. This example shows you can only secure your workplace devices once you know what is actually running on them.
· 5 min read - Policy & direction
Why Your Supplier's Security Is Also Your Problem
A large part of your ICT risk sits not with you, but with your suppliers. Read how you map that risk and gain concrete, practical control over it.
· 6 min read - Secure & resilient
Encryption Only Works If You Know Who Manages the Key
Encryption looks like a technical checkbox that just works, but without an overview of keys and certificates it protects very little. Here's how to approach it.
· 6 min read - Clarity & control
What if your biggest customer can't order for weeks?
After a cyberincident, Albert Heijn's distribution centres stood still for days. What does that kind of chain disruption mean for your business, and how do you prepare?
· 5 min read - People & behaviour
Why employees always find a way around your password policy
A strict password policy only works once employees understand why it matters. Here's how to measure first, build policy, then bring people along.
· 5 min read - Policy & direction
CEO fraud and liability: why policy comes before technology
A German court held a manager personally liable for millions in CEO fraud losses. Here is what that ruling means for your own company.
· 6 min read - Secure & resilient
Who decides: roll out an update right away, or test it first?
An update looks like a small technical task, but it can bring your business to a halt. Here's how to decide who's in charge of that choice.
· 5 min read - Secure & resilient
Citrix flaw shows why you need to know what's exposed to the internet
Citrix warns of active exploitation of a new NetScaler flaw. Here's what it means for your business and how to get a grip on your external access.
· 5 min read - Secure & resilient
Why Phishing Training That's Ticked Off Once a Year Solves Nothing
A mandatory phishing e-learning feels like a solution, but without measurement and policy little actually changes. Here's how we approach it differently.
· 5 min read - Secure & resilient
Who decides when your customers are being extorted?
After a hack at supermarket Flink, customers and staff were extorted directly. The real chaos only started afterwards, when it turned out there was no plan. What does this mean for your business?
· 5 min read - Secure & resilient
Cisco flaw hits the gatekeeper of your network: what now?
Cisco warns of active exploitation of a critical flaw in Identity Services Engine, the system that decides network access. Here's what it means for you.
· 5 min read - Secure & resilient
Why you panic at every new security vulnerability (and how it can be different)
Another critical vulnerability in the news? Without a change process, you're just putting out fires. Here's how a documented policy gives you control.
· 5 min read - Clarity & control
Why a former employee can often still just log in
An ex-employee who can still log in isn't an ICT glitch. It's a sign that access was never properly mapped out. Here's how to fix that.
· 6 min read - Secure & resilient
Critical vulnerability in FortiGate firewalls: why you need to act now
A critical security flaw in FortiGate firewalls is being actively exploited. Read what this means for your business and what steps are needed now.
· 5 min read - Clarity & control
Microsoft adds 5% to server licenses: what it means for your business
From October 1, 2026, Microsoft adds a 5% surcharge to monthly-billed server licenses. Read who is affected and what you can do now.
· 6 min read - Secure & resilient
The cybersecurity subsidy is open: here's how to get half your costs back
Since 7 September 2026, Dutch small businesses can get 50% of their cybersecurity measures reimbursed through Mijn Cyberweerbare Zaak, up to EUR 1,250. What qualifies and how to apply.
· 5 min read - Secure & resilient
Actively exploited SharePoint flaw: what it means for your business
A serious SharePoint security flaw is being actively exploited. Read what this means for your quotes, contracts and customer data, and what to do now.
· 5 min read - Secure & resilient
Critical flaw in Entra ID: why this touches the key to your business
Microsoft warns of active exploitation of a critical Entra ID vulnerability. Learn what this means for your Microsoft 365 environment and what to do now.
· 5 min read - Secure & resilient
The US warns of attacks on Siemens PLCs: what does this mean for your factory?
A US warning about vulnerable Siemens S7 PLCs shows that cybersecurity doesn't stop at the office. Read what this means for your production line.
· 6 min read - Secure & resilient
Data breach at Ceva Logistics: why this matters for your business too
Ceva Logistics suffered a breach exposing former employees' personal data. What this means for SME transport companies and what you can do now.
· 6 min read - Secure & resilient
Microsoft makes passkeys the default and retires SMS codes
Microsoft is retiring SMS and voice codes as sign-in verification and making passkeys the default. In plain language: what a passkey is, what your people will notice and what to arrange now.
· 5 min read - NIS2 & regulation
NIS2 has been passed: what 15 August 2026 means
The Cybersecurity Act (NIS2) has been passed and takes effect on 15 August 2026. In plain language: what was decided, who it applies to, and what you can calmly arrange now.
· 5 min read - Secure & resilient
Downtime happens to everyone: what matters is how fast you're back
Downtime is rarely dramatic, usually a spilled coffee or a failed update. Why fast recovery matters more than preventing everything, and how to arrange it.
· 7 min read - Policy & direction
How do you choose a reliable IT partner?
Choosing an IT partner is a matter of trust. Six things to look for, plus the question to simply ask in every conversation.
· 4 min read - Clarity & control
What's hiding in your IT?
Invisible IT clutter quietly costs you time and money. We show what builds up, why it slows you down, and how to get a grip on it again.
· 4 min read - Clarity & control
Smart automation that saves time and money
Automation doesn't have to be a big project. We show where time and money leak away at SMEs, and which small changes deliver the most.
· 4 min read - Policy & direction
The four risks of having no IT strategy
A weak IT strategy rarely announces itself. We show how it quietly hits your work, your name and your margin, and how to move from firefighting to calm.
· 3 min read - Clarity & control
Cleaning up your IT without breaking anything
Tidying up your IT feels risky: you don't know what's safe to remove. We explain why it's hard on your own, and what a guide adds.
· 4 min read - Policy & direction
Cyber insurance and IT: what your insurer expects of you
A cyber insurance policy doesn't always pay out. We explain the requirements insurers set, why claims fail, and how to make sure you're covered.
· 4 min read - People & behaviour
Phishing and social engineering: why it works
Phishing doesn't target your systems, but your people. We explain why it works, the tricks you'll see, and how to make your team calmly resilient.
· 4 min read - AI in practice
AI in your business, without the hype
AI is everywhere, but what's in it for you as an SME? A level-headed look: where AI helps, how to start safely, and what not to paste into an AI tool.
· 4 min read - Clarity & control
Where you can cut IT costs
Saving on IT rarely means 'cheaper', but clarity and the right model. We show where money leaks away and how to get a grip on it, without giving things up.
· 4 min read - NIS2 & regulation
NIS2 and SMEs: does it apply to you?
Does your business fall under NIS2? We explain in plain language who's affected directly and indirectly, what the law asks, and where to begin.
· 3 min read
Read along from your sector
We know the systems and the risks of your industry. Pick your sector and see how we help.
Anything else on your mind?
Short answers to what readers ask us most often.
-
Can I ask you something about an article?
Absolutely. Run into something, or want to know what a topic means for your situation? Book a no-strings intro call and we’ll simply think along, no obligations.
-
Who do you write these pieces for?
For owners and decision-makers without an in-house IT department. We explain IT and security in plain language, the way we’d do it at your table, without jargon or sales talk.
-
How do I find out how my own IT is doing?
Knowledge is a start, but your situation is specific. With the free security scan you’ll see where your own IT stands in a few minutes, and with MIRA we make it measurable and provable.
Newsletter
Practical IT insights, once a month
What happened, what it means for your business and one thing you can do today. No sales talk, unsubscribe anytime.
Thanks — you are on the list. You will receive a short confirmation by email.
Questions about your own IT?
Take the free scan and see how your own IT is doing, instead of leaving it at general knowledge. Want to talk it through? A no-strings intro call is always an option.
Free and no-strings, no sales pitch.