ISO 27001 Continual Improvement Policy In this guide, you will learn what an ISO 27001 Continual Improvement Policy is, how […]
ISO 27001 Continual Improvement Policy Explained + Template Read More »
ISO 27001 Supplier Security Policy In this guide, you will learn what an ISO 27001 Supplier Security Policy is, how
ISO 27001 Supplier Security Policy Explained + Template Read More »
In this guide, I will show you exactly how to implement ISO 27001 Return of Assets Beginner’s Guide and ensure
ISO 27001 Return of Assets (Annex A 5.11): The Complete Implementation Guide Read More »
A business impact analysis is a process that helps you identify the effects of a significant disruption on your organisation. You’ll figure
Business Impact Analysis Explained + Template Read More »
Introduction In this article I lay bare the changes to the ISO 27001 standard that happened in 2024 in the
ISO 27001:2022 Amendment 1 – Absolutely Everything You Need to Know Read More »
ISO 27001 Cloud Security Policy In this guide, you will learn what an ISO 27001 Cloud Security Policy is, how
ISO 27001 Cloud Security Policy Explained + Template Read More »
Introduction In the beginner’s guide to ISO 27001 Monitoring, Measurement, Analysis and Evaluation you will learn I am Stuart Barker,
ISO 27001 Monitoring, Measurement, Analysis and Evaluation | Beginner’s Guide Read More »
Threat intelligence is a new control introduced in the ISO 27001:2022 update. It is called ISO 27001:2022 Annex A 5.7
How To Create an ISO 27001 Threat Intelligence Process and Report Read More »
ISO 27001 Annex A 8.33 Test Information is a security control that mandates the protection of data used in testing
ISO 27001:2022 Annex A 8.33 Test Information: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.32 Change Management is a security control that mandates formal procedures for modifying information processing facilities
ISO 27001:2022 Annex A 8.32 Change Management : The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.31 Separation of Development, Test and Production Environments is a security control that mandates the logical
ISO 27001:2022 Annex A 8.31 Separation of development, test and production environments Read More »
ISO 27001 Annex A 8.30 Outsourced Development is a security control that mandates strict supervision of third-party vendors to ensuring
ISO 27001:2022 Annex A 8.30 Outsourced development: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.29 is a security control that mandates the definition and implementation of security testing processes within
ISO 27001 Annex A 8.28 is a security control that mandates the application of Secure Coding Principles throughout the software
ISO 27001:2022 Annex A 8.28 Secure Coding: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.27 Secure Systems Architecture and Engineering Principles is a security control that mandates organisations apply security
What is ISO 27001 Documented Information? The standard requires documentation for the information security management system ( ISMS ) and
ISO 27001 Documented Information Beginner’s Guide Read More »
ISO 27001 Annex A 8.26 Application Security Requirements is a security control that mandates organizations identify, specify, and approve information
ISO 27001:2022 Annex A 8.26 Application security requirements: The Lead Auditor’s Guide. Read More »
What is ISO 27001 Awareness? ISO 27001 awareness is about communicating the requirements for information security to people in the
ISO 27001 Awareness Beginner’s Guide Read More »
ISO 27001 Annex A 8.25 is a security control that mandates the establishment of rules for the secure development of
ISO 27001:2022 Annex A 8.25 Secure development life cycle: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.24 is a security control that mandates the establishment of rules for the effective use of
ISO 27001:2022 Annex A 8.24 Use of Cryptography: The Lead Auditor’s Guide. Read More »
Introduction In this tutorial we will cover ISO 27001 Risk Treatment. You will learn what ISO 27001 Risk Treatment is
ISO 27001 Risk Treatment – Tutorial Read More »
ISO 27001 Annex A 8.23 is a security control that requires organizations to manage access to external websites to reduce
ISO 27001:2022 Annex A 8.23 Web Filtering: The Lead Auditor’s Guide. Read More »
The Ultimate ISO 27001 Toolkit Own Your ISMS, Don’t Rent It You are a business wanting to get ISO27001 certified
ISO 27001 Annex A 8.22 is a security control that mandates the segregation of networks to restrict data flow between
ISO 27001:2022 Annex A 8.22 Segregation of Networks: The Lead Auditor’s Guide. Read More »
Introduction In this tutorial we will cover ISO 27001 Risk Assessment. You will learn what ISO 27001 Risk Assessment is
ISO 27001 Information Security Risk Assessment – Tutorial Read More »
hello! I’m the ISO 27001 Ninja and we continue our journey through ISO 27001 Clause by Clause ensuring that you’re going
ISO 27001 Risk Planning General Read More »
ISO 27001 Annex A 8.21 is a security control that requires organizations to manage the security of services provided by
ISO 27001:2022 Annex A 8.21 Security of Network Services: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.20 is a security control that mandates the implementation of network security measures to protect information
ISO 27001:2022 Annex A 8.20 Networks Security: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.19 is a security control that requires organizations to strictly govern the installation of software on
ISO 27001 Annex A 8.18 is a security control that mandates stringent restrictions on privileged utility programs—software capable of overriding
ISO 27001 Annex A 8.17 is a security control that mandates the synchronization of all information processing system clocks to
ISO 27001:2022 Annex A 8.17 Clock Synchronisation: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.16 is a detective security control that mandates the active monitoring of networks, systems, and applications
ISO 27001:2022 Annex A 8.16 Monitoring Activities: The Lead Auditor’s Guide. Read More »
Introduction Hello, I am the iso 27001 ninja and this is ISO 27001 Clause 5.2 policy. So, we’re going to do
ISO 27001:2022 Clause 5.2 Policy Explained Read More »
ISO 27001 Annex A 8.15 is a security control that mandates the production, protection, and regular analysis of audit logs
ISO 27001:2022 Annex A 8.15 Logging: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.14 is a security control that mandates the implementation of redundancy in information processing facilities to
ISO 27001 Annex A 8.13 is a security control that mandates the regular backup of information, software, and systems to
ISO 27001:2022 Annex A 8.13 Information Backup: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A Controls list with free iso 27001 annex a controls list excel download and PDF. The complete
ISO 27001 Annex A Controls List Read More »
ISO 27001 Annex A 8.12 is a security control designed to prevent the unauthorized extraction or disclosure of sensitive information.
ISO 27001:2022 Annex A 8.12 Data Leakage Prevention: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.11 is a security control that mandates the use of data masking to obscure sensitive information
ISO 27001:2022 Annex A 8.11 Data Masking: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.10 is a preventative security control that mandates the secure deletion of information when it is
ISO 27001:2022 Annex A 8.10 Information Deletion: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.9 is a security control that requires organizations to define and maintain secure configuration baselines for
ISO 27001:2022 Annex A 8.9 Configuration Management: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.8 is a security control that mandates the effective management of technical vulnerabilities within an organization’s
ISO 27001 Annex A 8.7 Protection Against Malware is a security control that mandates a multi-layered defence strategy to prevent,
ISO 27001:2022 Annex A 8.7 Protection Against Malware: The Lead Auditor’s Guide. Read More »
Onboarding a new supplier? Did you know that these third-party relationships represent the biggest risk to your organisation when it
ISO 27001: The Importance Of Third-Party Supplier Security Management Read More »
ISO 27001 Annex A 8.6 Capacity Management is a security control that ensures organizations monitor and adjust resource usage to
ISO 27001:2022 Annex A 8.6 Capacity Management: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.5 is a security control that mandates organizations implement secure authentication procedures to verify the identity
ISO 27001:2022 Annex A 8.5 Secure Authentication: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.4 Access to Source Code is a security control that mandates organizations to strictly manage access
ISO 27001:2022 Annex A 8.4 Access to Source Code: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.3 Information Access Restriction is a security control that limits access to assets based on established
ISO 27001:2022 Annex A 8.3 Information Access Restriction: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.2 Privileged Access Rights is a security control that mandates the strict restriction and management of
ISO 27001:2022 Annex A 8.2 Privileged Access Rights: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.1 is a security control that mandates the protection of information stored on, processed by, or
ISO 27001:2022 Annex A 8.1 User Endpoint Devices: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 7.14 Secure Disposal or Re-use of Equipment is a security control that mandates the verification of
ISO 27001 Annex A 7.13 Equipment Maintenance is a security control that mandates organisations maintain hardware according to manufacturer specifications
ISO 27001:2022 Annex A 7.13 Equipment Maintenance : The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 7.12 Cabling Security is a security control that mandates the physical protection of power and telecommunications
ISO 27001:2022 Annex A 7.12 Cabling Security: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 7.11 Supporting Utilities is a security control that mandates the protection of information processing facilities from
ISO 27001:2022 Annex A 7.11 Supporting Utilities: The Lead Auditor’s Guide. Read More »
Introduction As humans, we constantly strive for improvement; whether it’s our mission to climb that career ladder, testing our endurance
ISO 27001 Continual Improvement Explained Read More »
ISO 27001 Annex A 7.10 Storage Media is a security control that mandates the lifecycle management of physical and removable
ISO 27001:2022 Annex A 7.10 Storage Media: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 7.9 Security of Assets Off-Premises is a security control that mandates the protection of hardware and
ISO 27001:2022 Annex A 7.9 Security of Assets Off-Premises: The Lead Auditor’s Guide. Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.8 and ensure you pass
ISO 27001:2022 Annex A 7.8 Equipment siting and protection Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.6 and ensure you pass
ISO 27001:2022 Annex A 7.6 Working in secure areas Read More »
Not hired an ISO 27001 Consultant yet? Oh sh*t, you’re screwed! I jest. If you’re a small business and you
ISO 27001 Consultancy: The Ultimate Guide Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.7 and ensure you pass
ISO 27001:2022 Annex A 7.7 Clear desk and clear screen Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.5 and ensure you pass
ISO 27001:2022 Annex A 7.5 Protecting against physical and environmental threats Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.4 and ensure you pass
ISO 27001:2022 Annex A 7.4 Physical security monitoring Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.3 and ensure you pass
ISO 27001:2022 Annex A 7.3 Securing offices, rooms and facilities Read More »
ISO 27001 Protection Against Malware and Antivirus Policy In this guide, you will learn what an ISO 27001 Protection Against
ISO 27001 Protection Against Malware and Antivirus Policy Explained + Template Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.2 and ensure you pass
ISO 27001:2022 Annex A 7.2 Physical entry Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 7.1 and ensure you pass
ISO 27001:2022 Annex A 7.1 Physical security perimeters Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.8 and ensure you pass
ISO 27001:2022 Annex A 6.8 Information security event reporting Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.7 and ensure you pass
ISO 27001:2022 Annex A 6.7 Remote working Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.6 and ensure you pass
ISO 27001:2022 Annex A 6.6 Confidentiality or non-disclosure agreements Read More »
Consultancy without the Consultant Price Tag Access 40 group Q&A sessions a year. Get direct answers from the ISO 27001
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.5 and ensure you pass
ISO 27001:2022 Annex A 6.5 Responsibilities after termination or change of employment Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.4 and ensure you pass
ISO 27001:2022 Annex A 6.4 Disciplinary process Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.3 and ensure you pass
ISO 27001:2022 Annex A 6.3 Information security awareness, education and training Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.2 and ensure you pass
ISO 27001:2022 Annex A 6.2 Terms and conditions of employment Read More »
Introduction Artificial intelligence (AI) is a hot topic at the moment. It’s taking over our jobs, our lives, THE WORLD! AHHHHH!
The Top 5 Ways AI is Changing ISO 27001 Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 6.1 and ensure you pass
ISO 27001:2022 Annex A 6.1 Screening Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.37 and ensure you pass
ISO 27001 Annex A 5.37: A Practical Guide to Documented Operating Procedures Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.36 and ensure you pass
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.35 and ensure you pass
ISO 27001:2022 Annex A 5.35 Independent review of information security Read More »
Let us start with what these information security frameworks are so we have a baseline understanding and then explore the
ISO 27001 vs SOC 2: The difference explained simply Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.34 and ensure you pass
ISO 27001:2022 Annex A 5.34 Privacy and protection of PII Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.33 and ensure you pass
ISO 27001:2022 Annex A 5.33 Protection of records Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.32 and ensure you pass
ISO 27001:2022 Annex A 5.32 Intellectual property rights Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.31 and ensure you pass
ISO 27001:2022 Annex A 5.31 Legal, statutory, regulatory and contractual requirements Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.30 and ensure you pass
ISO 27001:2022 Annex A 5.30 ICT readiness for business continuity Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.29 and ensure you pass
ISO 27001:2022 Annex A 5.29 Information security during disruption Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.28 and ensure you pass
ISO 27001:2022 Annex A 5.28 Collection of evidence Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.27 and ensure you pass
ISO 27001:2022 Annex A 5.27 Learning from information security incidents Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.26 and ensure you pass
ISO 27001:2022 Annex A 5.26 Response to information security incidents Read More »
ISO 27001 Patch Management Policy In this guide, you will learn what an ISO 27001 Patch Management Policy is, how
ISO 27001 Patch Management Policy Beginner’s Guide Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.25 and ensure you pass
ISO 27001:2022 Annex A 5.25 Assessment and decision on information security events Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.24 and ensure you pass
Become A Top ISO27001 Consultant With This Toolkit
ISO 27001 Consultant Toolkit Read More »
ISO 27001 is a security control that establishes a comprehensive Information Security Management System (ISMS) to systematically identify, manage, and
ISO 27001 Certification in Australia: The Complete Guide Read More »
The Ultimate ISO 27001 Toolkit Whether you are a business or a consultant, this is the most ruthlessly effective ISO
The Ultimate ISO 27001 Toolkit Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.23 and ensure you pass
ISO 27001:2022 Annex A 5.23 Information security for use of cloud services Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.22 and ensure you pass
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.21 and ensure you pass
ISO 27001:2022 Annex A 5.21 Managing information security in the ICT supply chain Read More »
In this guide, I will show you exactly how to implement ISO 27001 Annex A 5.20 and ensure you pass
ISO 27001:2022 Annex A 5.20 Addressing information security within supplier agreements Read More »
