Nigel LandmanISO/IEC 27001, it is a risky business.ISO/IEC 27001 [1] is a management system standard (MSS) [2] with information security as its focus. It is not a risk framework; it is not a…Nov 2
Roman BurdiuzhaISO 27001 vs SOC 2: a Friendly Face-off in the World of Security StandardsToday, we’re diving into the thrilling world of cybersecurity standards, specifically ISO 27001 and SOC 2. If you’ve ever found yourself…Feb 27
Nigel LandmanISO/IEC 27001 and the infamous gap analysisFollowing a quick chat with ChatGPT (Oct 2024) the AI suggested that, overall, a gap analysis is a strategic tool for any organization…Oct 29Oct 29
InCyberSecurity and GDPR compliancebyCyberSecuraUsing the Deming wheel for ISO 27001 certification: Do and Check phasesAs we explained in our recent blog article on the subject, the Deming wheel (also known as the PDCA method for Plan, Do, Check and Act) is…Apr 30Apr 30
Nigel LandmanISO/IEC 27001, Annex A and all that jazzJust what makes people believe that the Annex A to ISO/IEC 27001 (that is the abbreviation, once again [1]) is mandatory for Certification?Oct 25Oct 25
Nigel LandmanISO/IEC 27001, it is a risky business.ISO/IEC 27001 [1] is a management system standard (MSS) [2] with information security as its focus. It is not a risk framework; it is not a…Nov 2
Roman BurdiuzhaISO 27001 vs SOC 2: a Friendly Face-off in the World of Security StandardsToday, we’re diving into the thrilling world of cybersecurity standards, specifically ISO 27001 and SOC 2. If you’ve ever found yourself…Feb 27
Nigel LandmanISO/IEC 27001 and the infamous gap analysisFollowing a quick chat with ChatGPT (Oct 2024) the AI suggested that, overall, a gap analysis is a strategic tool for any organization…Oct 29
InCyberSecurity and GDPR compliancebyCyberSecuraUsing the Deming wheel for ISO 27001 certification: Do and Check phasesAs we explained in our recent blog article on the subject, the Deming wheel (also known as the PDCA method for Plan, Do, Check and Act) is…Apr 30
Nigel LandmanISO/IEC 27001, Annex A and all that jazzJust what makes people believe that the Annex A to ISO/IEC 27001 (that is the abbreviation, once again [1]) is mandatory for Certification?Oct 25
Nigel LandmanScope and other stuff, ISO/IEC 27001Notwithstanding some of the many inaccuracies surrounding ISO/IEC 27001 (that is the abbreviation) [1], the time has now come to look at…Oct 23
Nigel LandmanDoing stuff in preparation for ISO/IEC 27001Having eliminated, in previous musings, some of the misinterpretations around ISO/IEC 27001, the time has come to do other stuff towards…Oct 18