Twenty Seven Ways to Comply
The Netherlands transposed NIS2 twenty two months late. Boards are now directly accountable, and Europe has one more national regime to reconcile.
The System Is Not a Person
When an AI agent causes damage, attribution runs through people and must be established one by one. In contract, the debtor must prove the failure was not attributable to it.
The Ethics of Asking Nicely
Three ethics credits, still pending accreditation, requested for a session on prompting. The hard question is liability, and phrasing does not answer it.
Formally Correct, Operationally Useless
ENISA's 2026 threat landscape changes no obligation. Its real test is the risk assessment that ages in an archive and the supplier management reduced to a questionnaire.