About Lowersideband
Lowersideband is built and run by one person. I work in cyber security, and before that I served in the Navy, including a deployment in a combat zone. I keep my name out of the site on purpose: the guides and tools should be judged on whether they are correct and useful, not on who wrote them.
The site is an independent project. It is paid for entirely by me, and nobody sponsors it, advertises on it or tells me what to publish.
Why it exists
NIS2, ISO 27001 and the GDPR are written for lawyers and auditors. Many small organisations have to act on them without a compliance team, and most of what they find is either dense legal text or a sales page. I wanted the straight version: what the rules ask for, what to do first, and what you can safely ignore.
So the guides are written in plain language, the tools run in your browser where they can, and each page says what it cannot do.
How the site is run
- No tracking. No analytics, no advertising, no third-party scripts. The only thing stored in your browser is your theme choice. See the privacy page.
- No sign-ups and nothing to buy. Every guide and tool is free to use.
- Open about the method. The security auditor shows every check and its weight on the grading page, and the status page shows whether it is running.
- Dated content. The what changed page records when the law and standards were last reviewed.
What to rely on it for
The guides and tools give general information to help you understand and prepare. They are not legal advice, and they are not an audit or a certification. Rules differ by country and change over time, so check the official texts linked on each page for anything you depend on.
This is an independent project. It is not affiliated with the EU, ISO or any regulator.