Arnaud de Makeset
5 articles
The AI Act: rules written before ChatGPT, revised without a new assessment
American start-ups capture 61 % of global AI funding, European ones 6 %. The usual conclusion is that Europe shot itself in the foot by regulating. The valid criticism is narrower: the impact assessment underpinning the AI Act dates from 2021, before generative models, and the July 2026 reform received none at all. What actually applies to a small business, and what does not hold up.
Cyber Resilience Act: what becomes mandatory on 11 September 2026, even for products you already sold
One date always comes up about the Cyber Resilience Act: 11 December 2027. But a first deadline arrives much sooner. From 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents, including for software that has been sold for years. Here is what that means in practice, and what you need in place by then.
AI Agents for Small Business: What Actually Works in 2026
Everyone's talking about AI agents in 2026. Anthropic launched Claude Cowork with 11 enterprise plugins. OpenAI pushed Frontier for building agents. Every SaaS tool added "agentic" to their marketing page. Gartner says 80%+ of enterprises will run agentic AI in production by end of 2026...
NIS2 Compliance in Belgium: The Practical Checklist for 2026
The NIS2 deadline in Belgium is April 18, 2026. That's not a typo and it's not far away. If your company has 50 or more employees, or turns over more than 10 million euros, and you operate in one of 18 critical sectors - this law applies to you. Right now, roughly one in four registered businesses h...
Cybersecurity Framework for SMBs: NIST CSF 2.0 + CyFun
What cybersecurity framework should a small business use? NIST CSF 2.0 is the global standard. It is free, vendor-neutral, and scales from a 5-person company to a multinational. In Belgium specifically, the CCB (Centre for Cybersecurity Belgium) built CyberFundamentals (CyFun) on top of NIST CSF. Cy...