“Now he’s completely lost it” is probably what a regular reader might think. After all, I use plain text (Markdown) as the “single source of truth”1 in my document workflow, and now I want proper charts for visualization. Not ASCII bars. Actual pie charts. The kind managers and decision-makers expect. Read more

Over the weekend, I published a sample repository on Codeberg. It proposes treating ISMS documentation like code. The concrete example is an ISO 27001 risk assessment for organizational assets. The focus is less on the document itself and more on the underlying concept. Everything is written in a universal, text-only format that will still be editable in any editor 50 years from now: Markdown. Read more

How many admins does it take to roll out 150 client PCs in one morning? The honest answer for most mid-sized companies: too many. If people are walking from machine to machine with USB sticks, the approach is fundamentally wrong and inefficient. What is missing are clear concepts, monitoring, automation, and scalability. Read more

The BSI report for 2025 (as of October 2025) is out. There is not much fundamentally new. Here the key points, with some context: The threat level remains high and stable. Misconfiguration of systems and software jumped from 28% in the previous period to 44%. Web-facing attack surfaces are in a “concerning state”. Read more