What changed from ISO 27001:2013 to 2022: four control themes, 93 controls, 11 new controls such as threat intelligence and DLP, and how to map your existing ISMS.
Stage 1 reviews your documentation, Stage 2 tests whether the ISMS operates. Here is what auditors check at each.
ISO 27001 Stage 1 vs Stage 2 audit: what to expect Read More »
The SoA is the document auditors scrutinise hardest. Here is what it must contain, how to justify exclusions, and the mistakes that fail Stage 1.
The ISO 27001 Statement of Applicability, explained Read More »
The honest answer depends on where your buyers are. Here is how to choose, and how to avoid paying twice when you eventually need both.
ISO 27001 vs SOC 2: which should you do first? Read More »
