Use cases, frameworks explained, a free template and an honest comparison. Written from the knowledge QoBot itself uses, with the official sources linked. Free to read and copy.
A customer questionnaire, an insurance renewal, a new law, an incident, or no plan at all. Each page shows what QoBot does, what stays with your team, and a worked example.
A customer sends 200 questions and a Friday deadline. How to reuse what you already have, answer honestly where you're not there yet, and turn the gaps into a plan.
The questions insurers ask, the controls that change your answers, and the proof to keep ready. Your application is a declaration: answer it from evidence.
NIS2, GDPR, DORA, ISO 27001, your customers' clauses. QoBot works out what applies to your company and why, then turns it into a plan your team can follow.
A hacked mailbox, a ransomware note, a lost laptop. What to do in the first hour, who must be told and by when, and what goes in the register.
A supplier emails new bank details before a payment. How to check them, the rule that stops the fraud, and what to do in the first hour if the money already left.
No CISO, no plan, an IT provider doing what they can. Where to start, what to do first this month, and how to keep going without becoming an expert.
A new customer contract, an audit, a supplier that worries you: QoBot starts from your question and your company.
Each page answers three questions: does it apply, what does it ask, and what's the smallest serious next step. Sources linked, last update shown.
Cybersecurity duties for medium and large organisations in 18 sectors, from health and transport to IT providers and manufacturing.
The international standard for running security as a management system. Often what a large customer asks for after the questionnaire.
The US report on your security controls, issued by a CPA firm against the AICPA's Trust Services Criteria. Often what US customers ask for in vendor reviews.
The automotive industry's information security assessment, run by ENX on the VDA ISA catalogue. Carmakers and their suppliers ask for its labels before sharing sensitive data.
The UK government's baseline certification: five technical controls, renewed every year. Expected on UK government and NHS contracts that handle personal data.
GDPR, DORA, a customer's own security requirements: QoBot works out what applies to your company, and why.
Ready-to-edit documents, free to copy, no sign-up. Or let QoBot fill them in for your company, with your tools and your people.
The rules everyone follows: passwords, devices, email, personal use, and what to do when something looks wrong. Free to copy.
Information security policy, incident response plan, backup policy, AI usage policy: QoBot writes them for your company, from what's true today.
Two deliverables written for fictional companies, in the format QoBot uses. Read them, print them, show them to whoever decides.
Seven actions in order for a 31-person food distributor, each with an owner, a time and a cost estimate. The page a manager reads, prints and forwards to the IT provider.
A one-page note for the board of a 420-person manufacturer: status per NIS2 measure, verified or declared, four decisions asked and the next steps with their owners.
The third example is free to copy: the IT charter everyone signs, with notes on how to adopt it.
The person who owns the security program: risks, policies, priorities, reporting to management. In French: RSSI. Many small companies have none; a part-time vCISO or QoBot can fill the role.
A DNS record that tells receiving mail servers what to do with emails that claim to come from your domain but fail the SPF and DKIM checks: deliver, quarantine or reject. It protects your domain against spoofing.
Security software on computers and servers that detects suspicious behaviour, can block it, and records what happened. Cyber insurers often ask whether you have it.
Logging in with something you know, like a password, and something you have, like a phone or a security key. A stolen password alone is then no longer enough.
The company that runs your IT. Under NIS2, managed service providers are themselves an Annex I sector.
Directive (EU) 2022/2555 on cybersecurity for medium and large organisations in 18 sectors, applied through each country's law. See NIS2 in plain words.
Including when a human vCISO or another tool fits better.
QoBot does the routine part of the work: your policies, your questionnaires, your NIS2 check, written for your company. Your team gets short, clear next steps, and keeps its days for the business.