Knowledge

Cybersecurity knowledge base

Articles on the standards, regulations and directives that shape security work, and trainings that explain the technology behind it.

Published October 2026CRA – cybersecurity requirements for connected productsThe EU Cyber Resilience Act (CRA) sets binding cybersecurity requirements for connected products sold on the EU market. Manufacturers already have to report actively exploited vulnerabilities and severe incidents to the EU's single reporting platform. When the regulation applies in full at the end of 2027, manufacturers, importers and distributors must make sure connected products carry the CE marking. Among other things, this means classifying products into security classes and managing risks and vulnerabilities as the regulation requires. Each security update must also remain available for at least ten years.Read more Published September 2026NIS2 — Tighter Cyber Requirements for Essential ServicesThe NIS2 Directive is implemented in Sweden mainly through the Cybersecurity Act and the Cybersecurity Ordinance, which entered into force on 15 January 2026. The Act replaces the previous NIS Directive and covers significantly more…Read more

Training · 20 partsHow does AI actually work?From raw training data to an agent that uses tools. An interactive walkthrough of how large language models work, step by step, with no prior knowledge needed.Start the training

Published October 2026The AI ActCybersecurity is essential to building trust in AI and to protecting users and society, under the EU's AI Act, which introduces comprehensive legal requirements from 2027.Read more Published September 2026DORAThe EU regulation on digital operational resilience, the Digital Operational Resilience Act (DORA), aims to strengthen the financial sector through penetration testing and remediation plans. From 17 January 2025, all firms must comply with the legal requirements.Read more Published September 2026GDPR — The Data Protection Regulation that Protects Personal PrivacyPersonal privacy deserves protection in society. That is the background to the data protection regulation that has applied throughout the EU since 2018.Read more Published October 2026SOC 2SOC 2 is a framework for the information security of service providers, especially those storing customer data in the cloud. In 2017, the audit body American Institute of Certified Public Accountants (AICPA) defined SOC…Read more Published October 2026NIST Cybersecurity FrameworkIdentify, protect, detect, respond, recover — this is an approach many people recognise and use to address systematic IT security work. Here we go through what the framework involves and what it…Read more Published October 2026Patientdatalagen (the Swedish Patient Data Act) governs how healthcare providers process personal dataPatientdatalagen (PDL) — the Swedish Patient Data Act — applies to all healthcare providers, both public and private. It supplements the General Data Protection Regulation (GDPR) with rules on how healthcare providers may process personal data.Read more Published October 2026Sweden's National Cybersecurity StrategySweden's National Cybersecurity Strategy Seclight operates within the challenge areas set out in the national cybersecurity strategy from 2025: cybersecurity work, skills and knowledge, preventing and managing incidents, vulnerable…Read more Published September 2026OWASP – open tools for secure softwareThe OWASP Top 10 is the best-known list of risks in web applications. But OWASP offers much more: standards for setting requirements, maturity models and tools for the software supply chain.Read more Published September 2026Standard of Good Practice for Information Security (SoGP)The Standard of Good Practice for Information Security (SoGP) is an information security framework from the Information Security Forum (ISF).Read more Published September 2026CIS ControlsThe CIS Controls are a set of control points with associated safeguards that guide organisations in addressing their IT security. The methodology can be a good complement to, and enabler for, ISO certification and…Read more Published September 2026Protecting Card Payments with PCI DSSThe Payment Card Industry Data Security Standard (PCI DSS) is an international information security standard that all companies and organisations that process, store or transmit payment card data need to comply…Read more Published September 2026Effective security management with the ISO 27000 seriesNew technical solutions are being developed at a rapid pace in the field of digitalisation. It's essential to keep up while always taking IT security and information security into account, so as not to risk leaving your own organisation…Read more