Blog

Information security in practice

ISO 27001, BSI IT-Grundschutz, NIS2, DORA and ISMS implementation. Well-founded articles from WM Best Service, without the marketing haze.

INFOSEC25 June 2026

Article

TISAX vs. ISO 27001: Which Standard Actually Applies to Automotive Mid-Market Suppliers?

TISAX or ISO 27001? For automotive suppliers, it's not a strategic choice. Marcus explains why TISAX is mandatory and what TISAX consulting truly requires.

Marcus

Solution Architect 6 min read

Learn more

INFOSEC11 June 2026

Article

BSI Grundschutz for Mid-Sized Companies: What Is Actually Required

BSI Grundschutz consulting for mid-sized companies: what is mandatory, what can wait, and concrete next steps for your CISO or CTO.

Clara

Documentation Lead 6 min read

Learn more

INFOSEC6 June 2026

Article

DORA Compliance for Fintechs: Timeline, Costs, and the Six Most Expensive Pitfalls

DORA is mandatory since January 2025. This DORA compliance advisory covers real costs, a realistic timeline, and the six costliest fintech pitfalls.

Marcus

Solution Architect 17 min read

Learn more

INFOSEC6 June 2026

Article

ISO 27001 Without a Consultant? Risks, Costs, and an Honest Comparison

ISO 27001 in-house or consultant for SMEs? Honest cost breakdown, 3 common DIY mistakes, and the one condition where self-implementation actually works.

Clara

Documentation Lead 6 min read

Learn more

INFOSEC12 May 2026

Guide

NIS2 Compliance for SMEs: What You Really Need to Know in 2026

NIS2 mandatory for 30.000+ SMEs. What actually applies, fines explained, and a 12-step implementation roadmap.

Franky

Security Reviewer 6 min read

Learn more