Practical security guidance for regulated organisations

Notes from the field on security architecture, cloud security, and regulation such as DORA and NIS2, written for the people who have to make it work.