Compliance
How to implement the EU AI Act yourself: a step by step plan
An eight step plan for the EU AI Act: inventory your AI, find your role, classify risk, meet AI literacy and transparency duties, and track the dates.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
How to implement the Essential Eight yourself, step by step
Choose a target maturity level, baseline all eight strategies, then raise every one to that level together. Here is the order, owners and evidence to keep.
Oct 18, 20265 min read
Compliance
How to implement DORA yourself: a nine step plan
A nine step plan to implement DORA in house: scope, governance, inventory, framework, incidents, testing, third parties, evidence and a review cycle.
Oct 18, 20265 min read
Compliance
How to implement Cyber Essentials yourself, control by control
Set up the five Cyber Essentials controls yourself with concrete checks for firewalls, configuration, updates, access and malware, then pick a route.
Oct 18, 20266 min read
Compliance
How to implement CMMC 2.0 yourself: a step by step plan
A DIY plan for CMMC 2.0: find your level, scope CUI, gap check against NIST 800-171, remediate, write the SSP, score yourself, and prepare for assessment.
Oct 18, 20265 min read
Compliance
How to implement CCPA and CPRA yourself, step by step
A practical order of work for CCPA and CPRA: scope, map data, publish notices, build the request process, fix contracts and opt outs, keep the evidence.
Oct 18, 20265 min read
Compliance
How to implement BSI C5 yourself: a step by step plan
A plan for a small cloud team heading to a C5 audit: pick the service, run a gap check, build controls, collect dated evidence, then engage an auditor.
Oct 18, 20265 min read
Compliance
How to read your first SOC 2 Type 1 report, section by section
A SOC 2 Type 1 describes control design at one date, with no opinion on operating effectiveness. Learn the sections, red flags and what to tell customers.
Oct 18, 20265 min read
Compliance
How to implement NIS2 yourself: a ten step plan from the text
A step by step NIS2 plan built from Articles 20, 21 and 23: confirm coverage, brief the board, cover the ten measure areas and rehearse incident reporting.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.