ISO 27001 initial checklist
Scope, risks, SoA, evidence, audit and common errors before certifying.
See guide →Resource Center
Guides, real news and regulations to decide wisely.
A practical library to understand ISO 27001, ENS, NIS2, real incidents, BOE, EUR-Lex and cybersecurity reports without getting lost in technicalities.
Featured Resources
Start with what you need to solve.
Blue Moon's own content: each news is supported by a verifiable source and each guide ends in concrete actions.
Cybersecurity and regulations blog
INCIBE, BOE, EUR-Lex, real attacks and practical lessons for companies.
See blog →ISO/ENS/NIS2 Diagnostics
If you don't know what applies to you, start with a scope and gap diagnosis.
Request diagnosis →By topic
Recommended reading routes.
Instead of mixing everything together, separate regulations, actual incidents, and business readiness.
Regulations and compliance
Real news and vulnerabilities
Commercial preparation
Sources we use
Content connected to verifiable references.
For news, the standard is to link to the actual source and explain business impact without scaremongering.
INCIBE / INCIBE-CERT
Alerts, vulnerabilities and security notices.
See INCIBE →BOE
Applicable Spanish regulations: ENS, data protection and network security.
See BOE →EUR-Lex
European directives and regulations: NIS2, DORA, CRA and associated developments.
See EUR-Lex →ENISA and authorities
Reports, guides and European context of threats and good practices.
See ENISA →Do you want to prioritize?
We help you convert reading into actions.
We choose which rule, news or control really affects your company and we lower it into an executable plan.