NIS2 vs CRA: Why ‘Entity’ and ‘Product’ Obligations Don’t Merge Into One Programme

NIS2 and the CRA are frequently discussed as if they’re the same regulatory push wearing two names. They regulate two entirely different things, aimed at two entirely different actors — and an organisation that’s mapped one against its obligations has often mapped nothing useful against the other. I’ve written separately about NIS2’s essential-entity obligations and …

Read more

NIS2 Essential Entities: The Obligations the Highest Tier Actually Carries

If you are an essential entity, the supervisor does not wait for an incident to come looking. That single fact — proactive, ex-ante supervision — is what separates your obligations under NIS2 from everyone else’s, and it changes what “compliant” has to mean. NIS2 sorts in-scope organisations into two tiers, essential and important, and most …

Read more

GPU Scarcity, Capacity Planning and Compute Procurement

AI ambition runs into a hard physical constraint that software rarely does: the compute it needs is scarce, expensive, and cannot be conjured on demand. GPU capacity — the specialised hardware that trains and runs large AI models — has been in genuine shortage, which turns compute from a utility you draw on freely into …

Read more

Why technical decisions are trust decisions

Nobody talks about trust when they’re choosing a database. They talk about performance, cost, vendor support, and what the development team knows. These are legitimate considerations. They are not the complete picture. How data is stored is a trust decision. Who can access it is a trust decision. How long it is retained and what …

Read more