<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>RiskEye Insights — GRC playbooks by seQure</title>
    <link>https://riskeye.io/blog</link>
    <atom:link href="https://riskeye.io/blog.xml" rel="self" type="application/rss+xml" />
    <description>Short, opinionated guides from the seQure advisory practice — 5×5 risk registers, board-usable risk appetite, framework mapping, and the working behind them.</description>
    <language>en</language>
    <lastBuildDate>Fri, 20 Feb 2026 00:00:00 GMT</lastBuildDate>
    <generator>RiskEye · by seQure</generator>
    <image>
      <url>https://riskeye.io/logo.png</url>
      <title>RiskEye Insights</title>
      <link>https://riskeye.io/blog</link>
    </image>

    <item>
      <title>Mapping ISO 27001 and NIST CSF 2.0 without losing your mind</title>
      <link>https://riskeye.io/blog/iso27001-nist-csf-mapping-without-losing-your-mind</link>
      <guid isPermaLink="true">https://riskeye.io/blog/iso27001-nist-csf-mapping-without-losing-your-mind</guid>
      <pubDate>Fri, 20 Feb 2026 00:00:00 GMT</pubDate>
      <author>hello@riskeye.io (seQure Practice)</author>
      <category>Frameworks</category>
      <category>ISO 27001</category>
      <category>NIST CSF 2.0</category>
      <description><![CDATA[Two frameworks, one control library. A practical mapping strategy that gives your board a single coverage view and doesn't require rewriting your ISMS.]]></description>
    </item>

    <item>
      <title>Setting a risk appetite the board will actually use</title>
      <link>https://riskeye.io/blog/risk-appetite-your-board-will-use</link>
      <guid isPermaLink="true">https://riskeye.io/blog/risk-appetite-your-board-will-use</guid>
      <pubDate>Thu, 12 Feb 2026 00:00:00 GMT</pubDate>
      <author>hello@riskeye.io (James Rutledge)</author>
      <category>Governance</category>
      <category>Risk Appetite</category>
      <description><![CDATA[Board-approved appetite bands are the single lever that stops risk management from becoming compliance theatre. Here's how to write them.]]></description>
    </item>

    <item>
      <title>How to build a 5×5 risk register in a week (without hiring a consultant)</title>
      <link>https://riskeye.io/blog/5x5-risk-register-in-a-week</link>
      <guid isPermaLink="true">https://riskeye.io/blog/5x5-risk-register-in-a-week</guid>
      <pubDate>Sun, 01 Feb 2026 00:00:00 GMT</pubDate>
      <author>hello@riskeye.io (Nadia Kaan)</author>
      <category>Getting started</category>
      <category>Risk Register</category>
      <description><![CDATA[A pragmatic 7-day plan for standing up a board-grade risk register from scratch — the fixtures, the workshops, the anti-patterns.]]></description>
    </item>
  </channel>
</rss>
