Blog
Articles and resources on information security, compliance, and best practices.
ISO 27001 Clause 9.1: Monitoring, Measurement, Analysis and Evaluation
Clause 9.1 requires you to measure whether your ISMS and controls actually work. What to monitor, how to define metrics that pass audit, and what evidence to keep.
ISO 27001 Clause 8.3: Risk Treatment
Clause 8.3 requires you to implement your risk treatment plan and retain evidence. How to track control implementation and what auditors expect to see.
ISO 27001 Clause 8.2: Risk Assessment
Clause 8.2 requires you to perform risk assessments at planned intervals and when changes occur. How to run them, what to document, and what auditors expect.
ISO 27001 Amendment 1: Climate Change
ISO 27001:2022 Amendment 1 adds climate change to organizational context. What actually changed, what you need to do, and why it matters less than you think.
ISO 27001 Clause 8.1: Operational Planning
Clause 8.1 is where ISMS planning becomes action. How to plan, implement, and control the processes that make your security management system work.
ISO 27001 Clause 7.5.3: Document Control
Clause 7.5.3 covers how to control ISMS documents - access, storage, retention, and disposal. Practical guidance for keeping documentation secure.
ISO 27001 Clause 7.5.2: Creating and Updating
Clause 7.5.2 covers how to create and update ISMS documents - identification, format, review, and approval. What auditors expect to see.
ISO 27001 Clause 7.5.1: Documented Information
Clause 7.5.1 defines what documented information your ISMS must include. What the standard requires, what you actually need, and what auditors expect.
ISO 27001: History and Evolution
From BS 7799 in 1995 to ISO 27001:2022 - how the world's most widely adopted information security standard evolved over three decades.
ISO 27001 Clause 7.4: Communication
Clause 7.4 requires your organization to plan internal and external communications about the ISMS. What to define and how to document it.