Resources
We have all the free resources you need to understand every aspect of implementing and maintaining best-practice security and governance in compliance with a wide range of laws, regulations and standards.
Blog
Penetration Testing
The Top 5 Ways Hackers Could Access Your Property Management Systems
13 February 2026
Knowledge
Cyber Resilience
DORA
DORA resource hub
12 February 2026
Blog
Cyber Essentials
The Cyber Essentials Scheme’s 2026 Update and What it Means for Your Organisation
10 February 2026
Knowledge
Cyber Security
Ransomware
Ransomware
09 February 2026
Blog
GDPR
A Guide to TOMs (Technical and Organisational Measures) Under the GDPR
03 February 2026
Press releases
BSI Professional Services Japan, a division of BSI Japan, becomes GRC Japan KK, joining the GRC Solutions group
02 February 2026
Blog
Penetration Testing
How Cyber Criminals Target POS (Point-of-Sale) Systems and E-Commerce Sites
30 January 2026
Blog
GDPR
NIS Regulations
The Differences Between NIS2 and GDPR Representatives
30 January 2026
Fact sheets
Data Protection
GDPR
EU and UK GDPR Representatives: A practical guide
28 January 2026
Infographics
Data Protection
GDPR
Data Subject Access Requests – 10-step checklist
20 January 2026
Fact sheets
Data Protection
GDPR
Privacy
The Business Case for Data Protection Investment – Board Briefing
16 January 2026
Blog
Penetration Testing
How Insecure IoT Devices in Your Buildings Could Expose Tenants’ Data
16 January 2026
Infographics
Cyber Essentials
Cyber Security
Cyber Essentials Certification Process Infographic
15 January 2026
Fact sheets
Data Protection
GDPR
Privacy
Cookie Exceptions under PECR and the DUAA
14 January 2026
Blog
Penetration Testing
Broken Access Control: The Subtle Risks Still Trending in Web Application Penetration Tests
14 January 2026
Case study
Data Protection
GDPR
DPO as a Service Case Study
13 January 2026
Case study
Data Protection
GDPR
Data Protection Consultancy Case Study
12 January 2026
Blog
ISO 27001
ISO/IEC 27701:2025 – How it Helps Organisations Demonstrate GDPR and Global Privacy Compliance
12 January 2026