Choosing GRC software: 10 criteria for mid-sized firms
How to judge GRC and compliance software: ten criteria, a scoring matrix and the question of when a simple document repository is all you actually need.
News
What is changing in standards and laws.
New editions, deadlines and obligations – briefly put into context, with what you should actually do now.
Standards are revised, laws come into force, deadlines shift. If you run a management system or are planning an attestation, you need to keep track – and above all know what it means for your own organisation. That is what this page is for.
We put into context new editions of ISO 27001, ISO 9001 and ISO 42001, changes to NIS2, DORA, BSI C5 and the EU AI Act, and decisions by authorities and accreditation bodies. Every article ends with a short section on what the change means for you and which next step makes sense. On top of that come tips from practice and news from Sightadel.
All articles are written in our own words and checked as of the date given. They replace neither the original text of the standard or law nor legal advice. The version in force is always authoritative.
EU AI Act: the new deadlines after the 2026 amendment
The digital omnibus has postponed the high-risk obligations of the EU AI Act. Which deadlines now apply and what providers and deployers should be doing now.
NIS2 in Germany: what to do now that it applies
The German NIS2 Implementation Act has applied since 6 December 2025. An overview of registration, measures, reporting and management duties under the BSIG.
ISO 9001:2026 is out: changes and transition
ISO 9001:2026 was published in September 2026. What changes in substance, how long 2015 certificates remain valid and how to plan your transition in good time.
BSI C5:2026: what is new and when the catalogue applies
The BSI has published C5:2026. Which topics are new, why 1 June 2027 is the key date and how cloud providers should plan the transition to the new catalogue.
There are no articles in this category yet.
Start with one standard.
14 days, full access, no payment details. Everything you set up carries over into the paid plan.