Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Penetration Test

Grundschutz++ OSCAL Catalog: What the BSI Actually Requires for Pentests

We analyzed the Grundschutz++ OSCAL catalog: 998 requirements, penetration tests only optional. What this means for organizations under NIS-2.
Jan Kahmen
Jan Kahmen
5 min read
Cloud Security

Cloud Attacks 2026: What the IBM X-Force Report Means for Your Cloud Security

IBM X-Force 2026: 44% more attacks on cloud applications, 16M infected devices, identity as the primary risk. What organizations must do now.
Jan Kahmen
Jan Kahmen
7 min read
Penetration Test

BSI-Certified Pentest Providers: Certification, Requirements, and the Current List

Who is authorized to perform IS penetration tests according to BSI? Personal certification, company requirements, and the current BSI list.
Jan Kahmen
Jan Kahmen
4 min read
ISMS

DIN SPEC 27076: Preparation and Implementation for SMEs

What companies need to know about the CyberRisikoCheck based on DIN SPEC 27076: topic areas, scoring, funding, and the path to ISO 27001.
Jan Kahmen
Jan Kahmen
4 min read
ISMS

Protection Requirement Categories in Cyber Security

How organizations use BSI IT-Grundschutz protection requirement categories to prioritize IT security and allocate resources effectively.
Jan Kahmen
Jan Kahmen
4 min read
Red Teaming

Security Testing in the Context of the MITRE ATT&CK Framework

Cyberattacks follow recurring patterns. The MITRE ATT&CK Framework systematically catalogs these patterns and provides organizations with a common language.
Jan Kahmen
Jan Kahmen
11 min read