Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Are we measuring the wrong things? Flavius Plesu challenges why most security metrics are totally misleading.

Two red flags: too small to cope or too big to care. DORA is about transformation.

On the podcast: DORA compliance just doesn't work as a tick-box exercise, it needs a whole new mindset.

A CISO’s nightmare: management says “go,” but middle teams say “no.”

On the podcast: Small organisations face real constraints in DORA rollout, but the law doesn’t bend.

Six months in, EU organisations are already diverging on what DORA means. Is clarity coming?

On the podcast: 40-50% of organisations lack the skills for DORA compliance. There's only one option - train or risk non-compliance.

DORA is exposing a quiet crisis: talent burnout. Staff can’t scale without support.

On the podcast: DORA compliance needs IT, security and business talking daily. Silos won’t cut it anymore.

“We haven’t seen any substantive change in cybersecurity — unless it’s driven by compliance. PCI DSS got people moving, but only on part of their data. Enforcement is what’s waking people up.”