ISO 27001 is not a checklist. Yet many organizations treat it like one.
Why an effective ISMS starts with risk and proportionality, not with ticking off all 93 controls in Annex A.
Read articleBlog
Practical thinking on security, risk and compliance.
Articles about risk drivers, ISO 27001, critical processes and the practical side of cybersecurity.
TopicsISO 27001 implementationGRC and risk managementBusiness critical processes
Risk drivers as the basis for better cybersecurity risk management
How risk drivers improve cybersecurity risk management by explaining root causes, aggregating data and supporting management decisions.
Read articleThe commercial value of ISO 27001
Why ISO 27001 creates commercial value for SMEs by supporting sales, trust, procurement and security questionnaires.
Read articleWhy business critical processes should be identified first
Why business critical processes should be identified before cybersecurity risks, ISO 27001 and NIS2 can be managed effectively.
Read articleYour Security Ally
Mature security without detours.
Choose the topic that matters. On the contact page, you start the introduction by email and see what happens next.