SecOps: articles and guides.
Every CloudSoul article on SecOps, newest first.
Ground segment security: what a satellite operator checks before giving a supplier access
Before a supplier gets into a ground segment, the operator checks who will have access, how they connect and what that access can reach. The six areas of the review, where they come from under NIS2, the EU Space Act proposal, and what to build first.
Does ISO 27001 make you secure? What a certificate proves, what it leaves open, and how to check one is real
Not on its own. An ISO 27001 certificate proves a certification body audited your management system for a stated scope. It does not prove the controls work well. What it proves, where it stops, and how to check a certificate is genuine.
NIS2 and ransomware: what you must report, whether you can pay, and what Article 21 expects
Ransomware that can severely disrupt your services is a significant NIS2 incident: early warning within 24 hours, notification within 72. NIS2 does not ban paying. Reporting, payment, the COM(2026) 13 proposal, Article 21, GDPR and a first-24-hours checklist.
What is a significant incident under NIS2? The legal test, the thresholds for digital providers, and how to decide fast
Under NIS2 Article 23(3), an incident is significant if it causes or can cause severe operational disruption or financial loss for you, or considerable damage to others. The legal test, who decides, the thresholds for digital providers, a decision tree and the GDPR difference.
NIS2 incident reporting timeline: 24 hours, 72 hours, one month, and what goes in each report
NIS2 gives you 24 hours from becoming aware of a significant incident for an early warning, 72 hours for the incident notification and one month after that for the final report. What each report contains, who receives it, telling customers, and a timeline to copy.