CompanyAug 07, 2026Access control and least privilege in practiceLeast privilege is one of the most tested control areas in every framework, and it's where good intentions and daily practice drift apart fastest. This guide covers role based access, the joiner mover leaver lifecycle, timely deprovisioning, access reviews, and how OptiTech keeps...
CompanyAug 07, 2026AI governance and the EU AI Act: where to startThe EU AI Act sorts AI systems by risk and scales the rules to match. This guide walks through the four risk tiers, what high risk systems owe, how the Act overlaps with GDPR, and how OptiTech helps you inventory AI systems, assign risk, and keep controls and evidence current.
CompanyAug 07, 2026AI-styrning och EU:s AI-förordning: så kommer du igångAI förordningen sorterar AI system efter risk och anpassar reglerna därefter. Den här guiden går igenom de fyra risknivåerna, vad högrisksystem kräver, hur förordningen överlappar med GDPR och hur OptiTech hjälper dig att inventera AI system, tilldela risk och hålla kontroller oc...
CompanyAug 07, 2026The asset register: the foundation of security and complianceYou can't protect what you can't see. An asset register is the inventory of the systems, data, devices, and owners your business depends on, and almost every framework assumes you already have one. This guide covers what belongs in it and how OptiTech keeps it connected to your r...
CompanyAug 07, 2026Åtkomstkontroll och lägsta behörighet i praktikenLägsta behörighet är ett av de mest testade kontrollområdena i varje ramverk, och det är där goda avsikter och daglig praktik glider isär snabbast. Den här guiden går igenom rollbaserad åtkomst, livscykeln när någon börjar, byter roll och slutar, behörighetsgranskningar och hur O...
CompanyAug 07, 2026Audit findings and remediation: what auditors actually judge you onA clean audit isn't one with zero findings. It's one where every finding has an owner, a due date, and evidence at the end. This guide shows how to run audit findings and remediation as a process, and how OptiTech tracks findings, assessments, and evidence in one place.
CompanyAug 07, 2026Autentiseringsstandarder: MFA och passkeysFlerfaktorsautentisering och passkeys har gått från trevligt att ha till ett baskrav i varje ramverk och varje cyberförsäkring. Den här guiden går igenom varför lösenord ensamma inte räcker, hur nätfiskeresistent autentisering ser ut, och hur OptiTech gör din autentiseringspolicy...
CompanyAug 07, 2026Authentication standards: MFA and passkeysMulti factor authentication and passkeys have moved from nice to have to a baseline expectation across every framework and cyber insurance policy. This guide covers why passwords alone fail, what phishing resistant authentication looks like, and how OptiTech turns your authentica...
CompanyAug 07, 2026Automating security questionnaires: answer faster and win deals soonerEvery enterprise deal now ships with a security questionnaire, and answering it by hand has become a tax on your sales and security teams. This post shows why copy pasting old answers is slow and risky, and how OptiTech drafts questionnaire answers from your live program with sou...
CompanyAug 07, 2026Automating evidence collection: where compliance programs stallEvidence is where most compliance programs stall. Manual screenshots go stale the moment you take them, and the scramble before every audit never ends. This guide shows how automated integrations collect evidence on a schedule, track freshness, and map to controls once so a singl...
