Cybersecurity News and Compliance Insights

Understanding the Resource Allocation requirements for ISO 27001? Resource allocation for ISO 27001 means making sure your organisation provides the people, time, knowledge, technology, external support, management attention and financial resources needed to operate...

Understanding the Legal and Regulatory requirements for ISO 27001? Understanding legal and regulatory requirements forms an important part of ISO 27001 because information security does not operate separately from the wider duties of a business. An organisation may...

Understanding the Objective setting for ISO 27001? Setting information security objectives is an important part of ISO 27001 because it turns broad security commitments into specific results that an organisation can work towards, monitor and review. An Information...

How to complete a Scope for ISO 27001? Completing the scope for ISO 27001 means defining exactly where your Information Security Management System applies. The scope sets the boundary for certification and tells employees, customers, management and auditors which...

How to complete a risk assessment for ISO 27001? Completing a risk assessment for ISO 27001 means identifying the information security risks that could affect your organisation, assessing how serious those risks are and deciding what action you need to take. The...

What evidence is required to pass the ISO 27001 audit? Passing an ISO 27001 audit requires more than having a folder full of policies. An auditor needs evidence that your Information Security Management System, commonly called an ISMS, operates in practice and that...