Tidal Control Outage History
Tidal Control is up right nowPingoru has recorded 56 incidents for Tidal Control: 41 in the last 12 months and 6 in the last 90 days.
Incidents, newest first
Minor March 2, 2026 SOC 2 for startups: becoming compliant without losing speed –
Started Mar 02, 2026, 12:00 AM UTC· resolved Mar 02, 2026, 12:00 AM UTC
- resolved Mar 02, 2026, 12:00 AM UTC
SOC 2 does not require a Change Advisory Board or approval committees. The standard asks that changes are reviewed and tested before they go live, which means a pull request with mandatory peer review and automated testing already qualifies as a valid change management process. Founders who experience SOC 2 as a brake almost always caused it themselves by copying enterprise processes that do not fit their scale. Integrating controls into existing development workflows, rather than running compliance as a parallel project, is what preserves deployment speed.
Minor March 1, 2026 NIS2 checklist: what you need to have in order to be compliant –
Started Mar 01, 2026, 12:00 AM UTC· resolved Mar 01, 2026, 12:00 AM UTC
- resolved Mar 01, 2026, 12:00 AM UTC
The Dutch Cybersecurity Act, implementing NIS2, has applied since 15 August 2026, and supervision is active. Essential entities face fines of up to ten million euros or two percent of global turnover, and directors are personally liable. Compliance requires action across six areas: governance and management accountability, risk management, technical controls, incident detection and reporting, supply chain security, and continuous evaluation. Organisations that wait until the law is in force risk missing a thorough implementation, which takes six to twelve months.
Minor February 28, 2026 Is your startup too small for ISO 27001? Three triggers to start now –
Started Feb 28, 2026, 12:00 AM UTC· resolved Feb 28, 2026, 12:00 AM UTC
- resolved Feb 28, 2026, 12:00 AM UTC
ISO 27001 has no minimum size requirement, but timing matters: a traditional project takes six to twelve months, so waiting until a customer demands it often means losing the deal. Three triggers justify starting now: a customer has listed it in a questionnaire or RFP, you have enterprise or international ambitions within 12 months, or you process sensitive data in a regulated sector. Waiting makes sense if you lack product-market fit, process little sensitive data in a market that does not ask for it, or your team is fewer than four people with no spare capacity.
Minor February 27, 2026 Individual security measures are not yet NIS2 compliance –
Started Feb 27, 2026, 12:00 AM UTC· resolved Feb 27, 2026, 12:00 AM UTC
- resolved Feb 27, 2026, 12:00 AM UTC
Implementing individual security measures like two-factor authentication or an incident response plan does not add up to NIS2 compliance. Without a risk-driven foundation, assigned ownership, and continuous visibility, organisations end up with a checkbox mentality that leaves real gaps undetected. The shift to structural compliance requires linking every measure to a concrete risk, giving each measure a responsible owner, and replacing annual snapshots with ongoing monitoring. An honest inventory of what you already have is the right starting point, not adding more measures.
Minor February 26, 2026 How to choose the right ISO 27001 software for your company –
Started Feb 26, 2026, 12:00 AM UTC· resolved Feb 26, 2026, 12:00 AM UTC
- resolved Feb 26, 2026, 12:00 AM UTC
ISO 27001 software centralises policy documents, risk analyses, controls and evidence into one platform, replacing scattered spreadsheets and manual processes. It becomes necessary once team growth, IT complexity or customer demands make manual management impractical. The right platform supports continuous compliance, integrates with existing tools, handles multiple frameworks without duplicate work and keeps audit evidence current so certification does not collapse into an annual panic.
Minor February 25, 2026 Cybersecurity for startups: where to begin without making it complex –
Started Feb 25, 2026, 12:00 AM UTC· resolved Feb 25, 2026, 12:00 AM UTC
- resolved Feb 25, 2026, 12:00 AM UTC
Cybersecurity becomes relevant for startups before regulation forces it, because customers, investors and partners ask about it early. Most complexity comes not from the standards themselves but from a lack of internal overview, priorities and clear responsibilities. Five basic measures, including two-factor authentication, a password manager and least-privilege access, reduce risk immediately and with little effort. From there, a framework like ISO 27001 and automation through a platform like Tidal Control can turn loose measures into a coherent, auditable system.
Minor February 24, 2026 What is NIS2 and when does the directive apply to you –
Started Feb 24, 2026, 12:00 AM UTC· resolved Feb 24, 2026, 12:00 AM UTC
- resolved Feb 24, 2026, 12:00 AM UTC
NIS2 is a European cybersecurity directive that applies to medium-sized and large organisations active in one of eighteen designated sectors. It requires those organisations to implement ten categories of security measures under Article 21, place board-level responsibility for cybersecurity, and report significant incidents within 24 hours. Small and micro businesses are generally outside scope, but may face NIS2 requirements indirectly as suppliers. In the Netherlands the national Cybersecurity Act has applied since 15 August 2026, adding registration in the entity register to those duties.
Minor February 23, 2026 ISO 27001 vs ISO 27002: what's the difference and what do you need –
Started Feb 23, 2026, 12:00 AM UTC· resolved Feb 23, 2026, 12:00 AM UTC
- resolved Feb 23, 2026, 12:00 AM UTC
ISO 27001 is the certifiable standard containing the requirements for an information security management system, and it is the one in the ISO 27000 family an organisation certifies its ISMS against. ISO 27002 is a non-certifiable guideline that provides detailed implementation guidance for the same 93 controls listed in Annex A of ISO 27001. An auditor assesses your ISMS against ISO 27001, not against ISO 27002. Using ISO 27002 is a choice, not an obligation.
Minor February 22, 2026 ISO 27001 costs: What does certification really cost your organisation? –
Started Feb 22, 2026, 12:00 AM UTC· resolved Feb 22, 2026, 12:00 AM UTC
- resolved Feb 22, 2026, 12:00 AM UTC
ISO 27001 certification costs fall into three categories: internal time investment, the external audit, and ongoing maintenance. For most organisations the internal time investment is the largest item, not the audit fee. A small organisation with 10 to 25 employees can expect a total year-one investment of 8,000 to 20,000 euros. Scope, maturity and complexity drive costs more than headcount does.
Minor February 21, 2026 NIS2 for suppliers to NIS2-obligated organizations: what do you need to arrange now? –
Started Feb 21, 2026, 12:00 AM UTC· resolved Feb 21, 2026, 12:00 AM UTC
- resolved Feb 21, 2026, 12:00 AM UTC
NIS2-obligated organizations must contractually manage their supplier risk under Article 21, so suppliers who are too small to fall under NIS2 themselves still receive the requirements through questionnaires, contract clauses, and requests for evidence. The four measures clients ask about most are multi-factor authentication, timely updates, tested backups, and least-privilege access rights. Demonstrability is what counts, and three common routes exist: NIS2 Supply Chain (SC10, SC20, or SC30), CyberFundamentals, or ISO 27001, with the right choice depending on your role and the market your clients operate in.
Minor February 20, 2026 The fastest way to get ISO 27001 certified as a startup –
Started Feb 20, 2026, 12:00 AM UTC· resolved Feb 20, 2026, 12:00 AM UTC
- resolved Feb 20, 2026, 12:00 AM UTC
Startups facing ISO 27001 certification deadlines are often drawn to four-week promises or cheap auditors, but certificates from non-accredited bodies are increasingly rejected by enterprise procurement teams. A responsible timeline is around three months, achieved by combining a platform that automates evidence collection, personal security officer guidance, and an RvA-accredited auditor. Tidal Control used this approach to help Aivory achieve both ISO 27001 and NEN 7510 certification simultaneously within three months.
Minor February 9, 2026 What's New | January 2026 –
Started Feb 09, 2026, 12:00 AM UTC· resolved Feb 09, 2026, 12:00 AM UTC
- resolved Feb 09, 2026, 12:00 AM UTC
The January 2026 Tidal Control release adds 6 new ISO frameworks covering healthcare, cloud security, cloud privacy, and occupational health and safety, along with 61 new AWS EC2 security tests aligned with AWS Security Hub controls. The update also introduces a risk heatmap, bulk risk appetite updates, custom personnel roles, and KPI tiles across the Risk, Vendor, Asset, Policies, Documents, and Personnel overview pages. Navigation has been streamlined by removing the top bar and consolidating menu items under a revised profile menu.
Minor January 19, 2026 From trust to demonstrability: How CBYTE uses digital compliance as foundation for scalable growth –
Started Jan 19, 2026, 12:00 AM UTC· resolved Jan 19, 2026, 12:00 AM UTC
- resolved Jan 19, 2026, 12:00 AM UTC
CBYTE, a custom software company, found that client trust alone was no longer sufficient as larger organisations and healthcare clients began requiring objective compliance assurance. Rather than pursuing certification as a one-time project, CBYTE used Tidal Control to embed information security structurally into daily operations. Automated controls, such as testing dozens of disks for encryption with a single action, keep compliance scalable as each new client brings new security risks. With NIS2 approaching, CBYTE can demonstrate that information security is already firmly anchored in the organisation.
Minor December 24, 2025 What's New | December 2025 –
Started Dec 24, 2025, 12:00 AM UTC· resolved Dec 24, 2025, 12:00 AM UTC
- resolved Dec 24, 2025, 12:00 AM UTC
Tidal's December 2025 release adds 47 new AWS security tests covering IAM, KMS, Secrets Manager, and CloudWatch, following AWS Security Hub controls. Users can now link existing Jira tickets directly to Tidal Tasks and Issues to avoid duplicate work. A new Required Documents feature supports versioning and lifecycle management for recurring compliance evidence such as DPIA forms and ISO 27001 management review minutes. The release also includes Controls page performance improvements and fixes for GitHub, Azure app integration redirects, and Azure tests.
Minor November 28, 2025 From standstill to sales: How Dembrane turned compliance into their competitive advantage –
Started Nov 28, 2025, 12:00 AM UTC· resolved Nov 28, 2025, 12:00 AM UTC
- resolved Nov 28, 2025, 12:00 AM UTC
Dembrane was losing sales because prospects required ISO 27001 certification and the company had none. Working with Tidal Control, they achieved certification and reduced new employee onboarding from two weeks to 45 minutes. Bram Delisse, CEO, estimates a repeat of the process would now take 70% less effort. The certification removed the sales blocker and revenue started moving again.
Minor November 15, 2025 What's New | November 2025 –
Started Nov 15, 2025, 12:00 AM UTC· resolved Nov 15, 2025, 12:00 AM UTC
- resolved Nov 15, 2025, 12:00 AM UTC
Tidal Control's November 2025 update introduces the Personnel module, which lets teams assign and track policy acknowledgements by employee group with automatic onboarding tasks. A full two-way Jira sync now links Tidal Tasks and Issues directly to Jira. 58 new AWS security tests covering ECS, RDS, and S3 services have been added, aligned with AWS Security Hub controls. Editor improvements include bookmarks, anchor links, and cross-document references to Tidal objects.
Minor October 15, 2025 What's New | October 2025 –
Started Oct 15, 2025, 12:00 AM UTC· resolved Oct 15, 2025, 12:00 AM UTC
- resolved Oct 15, 2025, 12:00 AM UTC
The October 2025 Tidal Control update adds ISO 22301 and ISO 26000 to the framework library and redesigns the Frameworks overview page for clearer compliance progress tracking. Vendor management now supports multiple documents per vendor and risk rating comments. Sorting has been added to the Controls, Assets, and Risks pages, and Strict Mode now applies to the Evidence page to restrict document visibility to permitted users.
Minor September 30, 2025 ISO 27001 reference guide: complete overview of requirements and implementation –
Started Sep 30, 2025, 12:00 AM UTC· resolved Sep 30, 2025, 12:00 AM UTC
- resolved Sep 30, 2025, 12:00 AM UTC
ISO 27001 requires organisations to meet clauses 4-10 covering context, leadership, planning, support, operation, evaluation, and improvement, plus implement between 60 and 93 controls from Annex A. Certification involves a two-phase audit: a one-day document review in Phase 1 and a two-day implementation assessment in Phase 2. Common failures include procedures that do not match reality and employees unaware of their responsibilities. The resulting certificate is valid for three years, with annual surveillance audits of approximately one day each.
Minor September 15, 2025 What's New | September 2025 –
Started Sep 15, 2025, 12:00 AM UTC· resolved Sep 15, 2025, 12:00 AM UTC
- resolved Sep 15, 2025, 12:00 AM UTC
Tidal's September 2025 update adds an in-browser Evidence Viewer for documents, images, and test evidence without requiring downloads, and a redesigned Getting Started page to help new users set up Tidal faster. The Risk Management module has a cleaner interface, detail panels can now expand to full screen, and Strict Mode gains more granular field options across plans, assets, controls, vendors, issues, risks, and execution details. The help center now contains over 60 articles covering every page in Tidal Control.
Minor August 30, 2025 The 7 Biggest ISO 27001 pitfalls (and how to avoid them) –
Started Aug 30, 2025, 12:00 AM UTC· resolved Aug 30, 2025, 12:00 AM UTC
- resolved Aug 30, 2025, 12:00 AM UTC
ISO 27001 certification fails most often because of seven recurring mistakes: treating the standard as a technical IT test rather than a management system, copying controls without a risk assessment, defining scope too broadly, writing documentation nobody uses or reads, treating compliance as an annual ritual rather than a continuous process, and making one person a single point of failure. Avoiding these pitfalls requires active management involvement, a scope limited to business-critical systems, short practical procedures, and shared ownership of responsibilities across the organisation.
Minor August 15, 2025 What's New | August 2025 –
Started Aug 15, 2025, 12:00 AM UTC· resolved Aug 15, 2025, 12:00 AM UTC
- resolved Aug 15, 2025, 12:00 AM UTC
Tidal Control's August 2025 update adds task grouping options in Plans, two new frameworks (ISO 14001 and ISO 42001), Jira Cloud and Atlassian Admin integrations with 10 corresponding tests, and passkey authentication via WebAuthn, biometrics, and security keys. Additional fixes include archived controls now receiving an Undetermined status instead of compliant, and support for mixed-case organisation names.
Minor July 29, 2025 What's New | Q2 2025 –
Started Jul 29, 2025, 12:00 AM UTC· resolved Jul 29, 2025, 12:00 AM UTC
- resolved Jul 29, 2025, 12:00 AM UTC
Tidal's Q2 2025 release adds a Vendor Management module for tracking third-party compliance and risk assessments, including a library of preset vendors with pre-filled descriptions. The Controls overview page is out of beta, with inline editing and a new chip component for managing object connections. Six new GitHub security tests, redesigned Tasks and Issues interfaces, test history tracking, and automated policy version control are also included.
Minor June 25, 2025 Managing risk in a fast-growing fintech: how Floryn made compliance scalable –
Started Jun 25, 2025, 12:00 AM UTC· resolved Jun 25, 2025, 12:00 AM UTC
- resolved Jun 25, 2025, 12:00 AM UTC
Floryn, a fintech lender under De Nederlandsche Bank supervision, moved its compliance and risk processes from fragmented spreadsheets to Tidal Control after finding that recording risks and policies was not enough without systematically executing and demonstrating controls. Starting from around 120 risks built with KPMG, Floryn spread its workload across the year, linked controls directly to legislation such as the EBA guidelines, and embedded risk ownership across the whole organisation. Compliance awareness and consistent execution of internal processes have increased significantly as a result.
Minor June 1, 2025 Planning your ISO 27001 journey: from start to certificate –
Started Jun 01, 2025, 12:00 AM UTC· resolved Jun 01, 2025, 12:00 AM UTC
- resolved Jun 01, 2025, 12:00 AM UTC
Most ISO 27001 projects stall not from lack of knowledge or budget but from lack of planning: absent milestones, unclear time commitments, and no dedicated owner. A realistic journey runs five phases over twelve to eighteen weeks. Small organisations of ten to fifty people can reach certification in twelve to fourteen weeks; medium-sized organisations of fifty to two hundred fifty people should plan for sixteen to twenty-two weeks. A dedicated project leader available six to eight hours per week and management that makes decisions promptly are the two factors most likely to keep the project on schedule.
Minor May 6, 2025 What's New | Q1 2025 –
Started May 06, 2025, 12:00 AM UTC· resolved May 06, 2025, 12:00 AM UTC
- resolved May 06, 2025, 12:00 AM UTC
Tidal's Q1 2025 release adds a beta Controls overview page that combines controls and tasks in one screen, a redesigned test page with over 40 new tests that reduce manual tasks by an average of 30-35%, and a personal dashboard called My Overview. New frameworks include DORA (NOREA version), NIS2 Cyber Fundamentals, NIS2 Quality Mark, and ABDO. Tidal AI can now assist with business impact analysis directly in the platform, recommending a CIA classification based on your input.