ISO 27001 Supplier Security Policy Explained + Template

ISO 27001 Supplier Security Policy Explained + Template

An ISO 27001 supplier security policy is a playbook that keeps your company and your partners safe from cyber threats. It’s not as scary as it sounds, it’s all about making sure everyone you work with follows the same rules to protect important...
ISO 27001 Return of Assets Beginner’s Guide

ISO 27001 Return of Assets Beginner’s Guide

Introduction In the beginner’s guide to ISO 27001 Return of Assets you will learn  what return of assets is how to implement it I am Stuart Barker the ISO 27001 Ninja and using over 30 years experience on hundreds of ISO 27001 audits and ISO 27001 certifications...
Business Impact Analysis Explained + Template

Business Impact Analysis Explained + Template

A business impact analysis is a process that helps you identify the effects of a significant disruption on your organisation. You’ll figure out what parts of your business are most crucial and can’t be stopped. Key Questions to Ask During this...
ISO 27001 Cloud Security Policy: Explained + Template

ISO 27001 Cloud Security Policy: Explained + Template

An ISO 27001 Cloud Security Policy is essentially your company’s rulebook for making sure that all the data you store or process using cloud services (like Amazon Web Services, Microsoft Azure, or Google Cloud) stays safe and...
How To Create an ISO 27001 Threat Intelligence Process and Report

How To Create an ISO 27001 Threat Intelligence Process and Report

Threat intelligence is a new control introduced in the ISO 27001:2022 update. It is called ISO 27001:2022 Annex A 5.7 Threat Intelligence. In this article you will learn: What it is ISO 27001 Threat Intelligence How to implement ISO 27001 Threat Intelligence How to...
ISO 27001 Annex A 8.33 Test Information

ISO 27001 Annex A 8.33 Test Information

ISO 27001 Annex A 8.33 Test Information is an ISO 27001 control that requires you to use appropriate data when testing and to manage and protect it. In ISO 27001 this is known as ISO27001:2022 Annex A 8.33 Test Information. It is one of the 93 ISO 27001 Annex A...
ISO 27001 Annex A 8.32 Change Management

ISO 27001 Annex A 8.32 Change Management

ISO 27001 Annex A 8.32 Change Management is an ISO 27001 control that requires you to manage changes to both the information security management system (ISMS) and to the information processing facilities. In ISO 27001 this is known as ISO 27001:2022 Annex A...