QbilonQbilon
Start Trial
Blog

Insights for IT leaders

Compliance playbooks, CMDB deep-dives, and field notes from the Qbilon team. Articles are published in German.

Sort
NewestOldestTitle A–Z
The Qbilon Team· 3 min read

Compliance is Not a Project, but a Process

In most IT departments, work is heavily organized into projects. There is a start date, a defined budget, milestones, and an end date. You migrate the old ERP system to the cloud – project completed.…

Continuous ComplianceComplianceNIS-2IT Automation
Read post
The Qbilon Team· 4 min read

How to Evaluate the Return on Investment (ROI) of CAASM and EAM

Budget negotiations for IT security and architecture management often follow a grueling pattern. The Chief Information Security Officer (CISO) or Enterprise Architect stands before the Chief…

CAASMEAMROIAsset Management
Read post
The Qbilon Team· 4 min read

Integrating Security Tools: Why APIs Are the Heart of CAASM

The toolbox of a modern Chief Information Security Officer (CISO) is packed. According to industry studies, large enterprises use an average of 40 to 70 different security tools. There are solutions…

API IntegrationCAASMCybersecuritySecurity Tools
Read post
The Qbilon Team· 4 min read

The Anatomy of an Attack Surface: How Hackers Find Your Blind Spots

When IT managers talk about the security of their network, they often use the metaphor of a castle. They speak of high walls (firewalls), deep moats (network segmentation), and vigilant guards on the…

Attack Surface ManagementCAASMCybersecurityAngriffsfläche
Read post
The Qbilon Team· 4 min read

CAASM vs. CMDB: What are the Differences and Why Do You Need Both?

Whenever a new technology category conquers the IT market, a certain degree of confusion regarding the distinction from existing systems naturally arises in the first few months. The rapid rise of…

CAASMCMDBCybersecurityIT Service Management
Read post
The Qbilon Team· 4 min read

What is CAASM? Cyber Asset Attack Surface Management Explained Simply

In the world of IT security, hardly a year goes by without a new, complicated acronym. While concepts like EDR (Endpoint Detection and Response) or IAM (Identity and Access Management) have long…

CAASMCybersecurityAttack Surface ManagementCyber Asset Management
Read post
The Qbilon Team· 4 min read

Preparing for CAASM: What You Need to Know About the New Security Trend

If you have read technology blogs, studied analyst reports (such as those from Gartner), or attended a cybersecurity conference in recent months, you have almost certainly stumbled across a new…

CAASMCybersecurityAttack Surface ManagementAsset Management
Read post
The Qbilon Team· 3 min read

Review and Outlook: How Requirements for IT Databases Have Changed

If you ask an IT veteran to describe their associations with the term "Configuration Management Database" (CMDB), words like cumbersome, outdated, bureaucratic, or project graveyard are often…

API IntegrationAsset ManagementAttack Surface ManagementCloud Infrastructure
Read post
The Qbilon Team· 4 min read

Resource-efficient IT Monitoring: Monitoring without Performance Degradation

In the effort to establish full transparency and security in IT networks, companies have often resorted to a nearby but ultimately extremely painful method in recent years: the mass rollout of…

Agent BloatAgentless MonitoringAPI-based MonitoringCloud Monitoring
Read post
The Qbilon Team· 4 min read

Asset Management for CISOs: Do You Really Know Your Entire Network?

The role of the Chief Information Security Officer (CISO) has undergone a remarkable metamorphosis over the last decade. From a highly specialized "Chief Firewall Administrator" in the background,…

Attack Surface ManagementCISOCloud SecurityCybersecurity
Read post
The Qbilon Team· 4 min read

Synergies between Information Security Management Systems (ISMS) and EAM

In large IT organizations, there are often departments that sit physically close to one another but, in practice, work as far apart as if they were on different planets. A classic example of this…

Asset ManagementEAMEnterprise Architecture ManagementInformation Security
Read post
The Qbilon Team· 4 min read

The Burden of Proof (Evidence Generation) in IT Audits Made Easy

When you ask IT managers to describe their greatest professional trauma related to compliance frameworks (such as NIS 2, ISO 27001, or TISAX), the answer is rarely: "Defining the security policies."…

AutomationCloud SecurityCMDBCompliance
Read post
Newsletter

Stay ahead of NIS-2.

One email a month: compliance playbooks, CMDB deep-dives, and the occasional Qbilon behind-the-scenes. No spam, unsubscribe anytime.