Analysis of cyber security, compliance and AI governance requirements, including standards that apply internationally and rules that depend on the jurisdiction.
Cyber & GRC
What a buyer is usually asking when a questionnaire mentions ISO/IEC 27001, how to describe your position accurately, and what evidence you can offer if you do not hold a certificate.
5 min read
Read the insightCyber & GRC
Which parts of an ISO 27001 programme depend on the organisation, and which depend on the certification body.
4 min read
Cyber & GRC
How to give a complete and accurate answer to a supplier security questionnaire when ISO 27001 is not in place.
4 min read
Cyber & GRC
How investor due diligence on information security differs from a customer questionnaire, and how to present your position.
4 min read
Cyber & GRC
The security questions UK cyber insurers commonly ask at renewal, and how Cyber Essentials and ISO 27001 relate.
4 min read
Cyber & GRC
What compliance automation platforms typically contribute to an ISO 27001 or SOC 2 programme, and what still needs judgement.
4 min read
Cyber & GRC
How to define the scope of an ISO 27001 programme and settle the starting position before work begins.
4 min read
Cyber & GRC
How ISO 27001 scales to a company of about 20 people, what is simpler, and where the real constraints lie.
4 min read
Occasional analysis of cyber security, compliance and AI governance requirements.
You can unsubscribe at any time. Read our Privacy Policy.