ISO 27001 & ISO 22301 Blog – 27001Academy

ISO 27001 & ISO 22301 Blog – 27001Academy

If you’re implementing an ISMS, you’re probably wondering how to implement ISO 27001 controls from Annex A and how. There are 93 controls listed in this annex of ISO 27001, and most people get confused over which documents to use, which technology they need, what kind of evidence to produce ... Read More

If you’re implementing an Information Security Management System (ISMS), you’re probably wondering how to implement ISO 27001 controls from Annex A. There are 93 controls listed in this annex of ISO 27001, and most people get confused over which documents to use, which technology they need, what kind of evidence ... Read More

Completing training courses in ISO 27001, the international standard for information security management can be a valuable asset and beneficial to a CISO’s career. Not only does it demonstrate a CISO’s expertise in the field, but it also provides a framework for effective information security management. This article will explore ... Read More

So, you are an ISO 27001 consultant, and you think generative AI will take away all of your clients? Or you think generative AI will never be accurate enough for some serious work? Well, I believe none of this is true — I think that AI-powered tools will become very ... Read More

If you’re starting to implement ISO 27001, you probably have questions about what the standard requires, how to organize the project, how to implement each step, which documents to write, how to structure each document, who should be in charge of implementation, what kind of evidence needs to be created, ... Read More

Updated: March 23, 2023, according to the ISO 27001 2022 revision. According to Experian 2023 Second Annual Data Breach Industry Forecast, the largest number of data security breaches are happening because of human error and malicious insiders: “… 82% of data breaches involved a human element. It comes as no ... Read More

Cloud environment usage inevitably raises concerns about information security. Users expect information they stored, such as customer, personal, and sensitive data, to be in safe hands. They aim to choose a service provider carefully, so that they can sleep at night knowing that their data is secure. Therefore, SaaS companies ... Read More

Cloud environment usage inevitably raises concerns about information security. Users expect information they stored, such as customer, personal, and sensitive data, to be in safe hands. They aim to choose a service provider carefully, so that they can sleep at night knowing that their data is secure. Therefore, SaaS companies ... Read More

Cloud environment usage inevitably raises concerns about information security. Users expect information they stored, such as customer, personal, and sensitive data, to be in safe hands. They aim to choose a service provider carefully, so that they can sleep at night knowing that their data is secure. Therefore, SaaS companies ... Read More

ISO 27001 and ISO 27002 are being updated during 2022, so there is a great interest in what will change. Here are the most common questions we typically get, and the detailed explanations ... Read More