Guides

Compliance, explained by practitioners

Practical guides on ISO 27001, NIS2, the Cyber Resilience Act and the EU AI Act. What you have to do, and how to do it without a large team.

SMWritten by Sven Moritz, former CISO

Guides by regulationISO 27001 SOC 2 NIS2 TISAX®DORA CRA EU AI Act ISO 42001

Blog Post

AI agents in GRC: what they should decide and what stays with humans

What AI agents should do alone in compliance and what stays with people: three kinds of work, what NIS2, GDPR and the AI Act expect, and key controls.

Blog Post

Map once, comply many: how multi-framework control mapping works

Five frameworks rarely mean five times the work. How to build one control set, map ISO 27001, SOC 2 and NIS2 onto it and spot partial matches.

Blog Post

Cyber Resilience Act (CRA): the reporting obligations are live. What manufacturers must do now

Since 11 September 2026, manufacturers must report exploited vulnerabilities and severe incidents within 24 hours. Who reports, deadlines, what to set up.

Blog Post

Cyber Resilience Act (CRA): the reporting obligations are live. What manufacturers must do now

Since 11 September 2026, manufacturers must report exploited vulnerabilities and severe incidents within 24 hours. Who reports, deadlines, what to set up.

Blog Post

AI agents in GRC: what they should decide and what stays with humans

What AI agents should do alone in compliance and what stays with people: three kinds of work, what NIS2, GDPR and the AI Act expect, and key controls.

Blog Post

Map once, comply many: how multi-framework control mapping works

Five frameworks rarely mean five times the work. How to build one control set, map ISO 27001, SOC 2 and NIS2 onto it and spot partial matches.

What does this mean for your company?

Teddy maps every regulation that applies to you and shows where you stand, in a first working session.

Book a demo All frameworks