Regulation is rarely easy. But it must be made understandable.
This is precisely where K11’s collaboration with the academic publisher Duncker & Humblot comes in. Topics that are often considered complex, technical, or legally difficult to grasp in everyday business life are transformed into books designed to provide guidance: clear, practical, and with an understanding that governance is not just about policies, but about people, processes, and decisions.
The “Leicht gemacht” series embodies this approach.
Image source: K11 Consulting | Description: Information Security—Made Easy
Companies rarely have too few regulatory requirements. More often than not, there are too many of them, spread across different departments, systems, and areas of responsibility.
Data protection, information security, anti-money laundering, AI regulation, whistleblowing, and supply chain requirements are no longer matters that concern only individual specialists. They affect day-to-day operations, IT, HR, Legal, Compliance, Procurement, Sales, and Executive Management.
The key question, therefore, is not just: What does the law say?
The better question is: How does this knowledge find its way into the organization?
This is exactly where reference books play an important role. They provide a structured introduction, highlight connections, and help build a shared basic understanding. They are not a substitute for consulting, training, or internal implementation, but rather a solid foundation on which companies can continue to build.
The title “Made Easy” is not a promise that complex topics will suddenly become trivial. That would be frivolous—and boring, too.
What is meant is something else: Complexity is organized. Terms are explained. Connections become clear. Requirements are formulated in such a way that they are not only legally sound but also practically applicable.
After all, governance rarely fails because there are no rules. It more often fails because rules are not understood, not put into practice, or not integrated into everyday life.
The “Leicht gemacht” series aims to fill exactly this gap. It is aimed at people who hold positions of responsibility but don’t want to start every day by poring over legal texts. Executives, department heads, compliance officers, data protection officers, IT managers, and anyone in a company who has to explain why certain things can’t be handled “sometime down the line.”
A recent example is the new book “Information Security—Made Easy.”
The topic could hardly be more practical. Information security today is no longer just a technical issue. Of course, it involves systems, protective measures, attacks, vulnerabilities, and standards. But it’s at least as much about organization, processes, and awareness.
A company can use modern security software and still remain vulnerable if responsibilities are unclear, employees fail to recognize risks, processes are not documented, or security questions are only raised after something has already happened.
Information security is therefore not a one-time project. It is an ongoing management task.
The book addresses precisely this idea: Safety does not result from technology alone, but from the interplay of technical, organizational, and human measures.
Duncker & Humblot is known for its substantive scholarly and professional publications. This makes the partnership particularly well-suited for K11: Our topics lie at the intersection of law, technology, governance, and business practice.
This connection needs a format that can do more than just provide short catchphrases.
A book demands structure. It requires you to organize your thoughts clearly, define terms, and go beyond merely touching on topics. This is especially valuable when it comes to governance. After all, anyone who truly wants to understand data protection, AI, information security, or compliance needs more than just a checklist with a reassuring layout.
The books in this series highlight something that also plays a central role in K11’s day-to-day work: regulatory requirements must be interpreted.
Not watered down. Not overdramatized. But presented in a way that companies can actually use.
Consulting, project experience, and in-depth analysis give rise to formats that make knowledge accessible. This helps not only individual readers but also organizations: Books can prepare the ground for training sessions, structure internal discussions, provide guidance to executives, and raise awareness of regulatory issues within departments.
This way, knowledge isn't just imparted—it becomes applicable.
The collaboration between K11 and Duncker & Humblot shows that governance must not only be advised on, audited, and documented—it must also be explained.
The “Leicht gemacht” series is a good example of this: it presents complex topics in an accessible way without compromising their academic rigor.
With “Information Security—Made Easy, ” we’re now adding a topic that couldn’t be more relevant to businesses. After all, digital resilience isn’t achieved through technology alone.
It arises where knowledge, responsibility, and processes come together.
Or, to put it a little less solemnly: Security doesn't start in the server room. It starts in your mind.