Your Questions, Answered

Modern ransomware groups no longer just encrypt your files — they steal them first. In a double extortion attack, criminals threaten to publicly publish your sensitive data unless you pay, even if you have a clean backup. A backup restores your systems, but it does not remove the attacker's leverage over your stolen data. Data protection solves this: stolen files can be remotely deactivated and rendered permanently unreadable — eliminating the extortion threat before it can be used against you.

Effective ransomware protection requires a layered approach: AI-driven endpoint security to stop threats before they execute, email security to block phishing, backup and recovery to restore operations quickly, and data protection to neutralize extortion leverage if data is stolen. Magic Stone helps organizations combine these layers into a coherent strategy aligned with their risk exposure and compliance requirements.

Endpoints — laptops, desktops, and mobile devices — are among the most common entry points for cyberattacks. Endpoint protection detects, prevents, and responds to malware, ransomware, and unauthorized access on individual devices. Modern solutions use AI-driven behavioral analysis that recognizes new and evasive threats in real time, without relying on known attack signatures.

Human error remains one of the leading causes of cyber incidents. Research shows that 91% of all cyberattacks begin with a phishing email, and 94% of malware is delivered via email. Security awareness training equips employees to recognize phishing attempts, social engineering tactics, and other threats — significantly reducing the risk of a successful attack.

With data protection technology, you retain control of your files even after they leave your network. Stolen or leaked files can be remotely deactivated — rendered permanently unreadable, even on an attacker's offline system. You also retain the ability to track file access and generate forensic evidence of what happened.

Traditional data security focuses on keeping attackers out of your network perimeter. Data protection goes further — protection is embedded in the file itself, not tied to your network, DLP rules, or cloud permissions. Files stay protected after download, after sharing, and after leaving your environment.

Yes. Once a file is deactivated remotely, it becomes permanently unreadable — even on a device that is not connected to the internet. With embedded data protection, you maintain full control regardless of where the file ends up.

AI plays a central role in modern cybersecurity across three areas: threat detection, prevention, and response. AI-driven systems continuously monitor network traffic, user behavior, and system anomalies to identify potential threats in real time, and adapt to new threats by identifying unusual behavior rather than relying on known attack signatures.

Traditional security tools rely on pattern-matching and known attack signatures. AI uses behavioral analysis to identify subtle deviations from normal activity, helping detect zero-day attacks, insider threats, and new ransomware variants. AI also reduces false positives and continuously improves accuracy as it learns from new data.

Shadow AI refers to employees using AI tools without official organizational visibility or governance. Unmanaged usage may expose sensitive data, create compliance concerns, and bypass security policies. Organizations can manage it safely by gaining visibility into which tools are used and establishing governance aligned with the AI Act, GDPR, and NIS2.

NIS2 is a European directive setting a baseline cybersecurity standard for organizations in 18 critical sectors, including energy, transport, healthcare, financial services, and digital infrastructure. Senior management is directly accountable for compliance, and violations can result in fines of up to €10 million or 2% of global annual turnover.

Magic Stone helps organizations strengthen their cybersecurity posture in support of NIS2 compliance through AI-driven technologies covering ransomware protection, third-party risk management, Shadow AI visibility, data protection, email security, and continuous monitoring. We start with a NIS2 assessment to identify gaps and then help implement the right solutions.

NIS2 is a broad cybersecurity directive covering 18 critical sectors. GDPR focuses on the protection of personal data and privacy rights. DORA is sector-specific to financial institutions, requiring robust ICT risk management and incident reporting within 4 hours. Where DORA and NIS2 overlap for financial entities, DORA takes precedence.

Costs vary by company size, scope, and current security maturity, so there's no single flat number. The main cost drivers are the gap assessment and remediation work, internal staff time, and the external audit fee paid to an accredited certification body. Certification work also overlaps directly with NIS2 and DORA compliance, so the investment often covers more ground than the certificate alone. Book a free assessment to get a realistic, scoped estimate.

ISO 42001 is the first international standard for AI management systems (AIMS), a framework for governing how AI is developed, deployed, and monitored responsibly. If your organisation processes personal or sensitive data through AI systems, or falls under EU AI Act obligations, ISO 42001 demonstrates due diligence to regulators, customers, and partners.

ISO 27001 governs information security broadly, protecting the confidentiality, integrity, and availability of data across an organisation. ISO 42001 is narrower and specific to AI, governing how AI systems are designed, trained, deployed, and monitored, covering risks such as bias, transparency, and human oversight that ISO 27001 doesn't address. Many organisations pursue both together given their shared governance structure.

Three years, on a structured cycle: Year 1 is the initial certification audit, Years 2 and 3 are surveillance audits confirming the ISMS still meets requirements, and Year 4 brings a full recertification audit.

It depends on the customer base. Organisations selling to US-based enterprise or SaaS/cloud customers often find SOC 2 is a contractual requirement before contracts are signed. For organisations focused on European markets, ISO 27001 tends to carry more recognised weight, though companies serving customers on both sides of the Atlantic often need both.

Yes. There is meaningful control overlap between ISO 27001, ISO 42001, and SOC 2 certifications and NIS2/DORA requirements, so work done for one often directly supports the other.

Every third party with access to your systems, data, or networks is a potential entry point for attackers. Cybercriminals increasingly target weaker links in the supply chain to reach larger organizations. A supplier breach can expose your sensitive data and make you liable under NIS2 and DORA, which explicitly require organizations to manage third-party risk.

TPRM is the process of identifying, assessing, and continuously monitoring the cybersecurity risks introduced by external vendors and suppliers. Modern TPRM goes beyond periodic questionnaires toward continuous intelligence — monitoring external attack surfaces and real-time risk signals across your entire supplier ecosystem.

Magic Stone uses AI-powered TPRM solutions that provide continuous visibility into vendor risk — monitoring external attack surfaces, identifying vendor exposure in real time, and surfacing risk signals before they become incidents. This supports NIS2 and DORA supply chain compliance requirements.

Magic Stone works primarily with small and medium-sized businesses (SMEs) across the Benelux and Nordic regions. Our solutions deliver powerful cybersecurity without the complexity or cost of large-scale security programs — making enterprise-grade protection accessible to organizations without large in-house security teams.

Yes — SMEs are our primary focus. Small and medium-sized businesses are frequently targeted by ransomware precisely because they often have weaker security infrastructure. Magic Stone bridges this gap with expert guidance and carefully selected technologies — without requiring a large internal security team or budget.

Every technology partner in the Magic Stone network is thoroughly vetted to ensure their solutions align with our mission — protecting organizations against ransomware, enhancing visibility, and supporting NIS2 compliance. We focus on selecting the right technologies that genuinely address our clients' risk exposure and operational needs.