Skip to content

certification

All tags →

10 articles tagged "certification".


ISO 27001: History and Evolution

From BS 7799 in 1995 to ISO 27001:2022 - how the world's most widely adopted information security standard evolved over three decades.

5 min read

PDCA for ISO 27001: The Improvement Cycle

The PDCA cycle - Plan, Do, Check, Act - maps directly to ISO 27001 Clauses 4-10. Learn how to use it for implementation, audits, and continual improvement.

7 min read

C5 Cloud Security Attestation: A Practical Guide

BSI's C5 attestation framework covers 17 security domains for cloud providers. What C5 requires, how it relates to ISO 27001, and who needs it.

5 min read

ISO 27001:2022 Migration: Free Notion Template

A free Notion template for mapping ISO 27001:2013 controls to the 2022 version - side-by-side control mapping, implementation notes, and policy update tips.

4 min read

ISO 27001 Statement of Applicability

How to build your ISO 27001 Statement of Applicability - control selection, documentation requirements, and common mistakes auditors flag.

5 min read

ISO 27001 Documentation: What You Need

The mandatory documents and records ISO 27001 requires - what auditors actually check, how much documentation is enough, and common mistakes to avoid.

5 min read

How to Implement ISO 27001: Step by Step

A practical, step-by-step guide to implementing ISO 27001 - from scoping your ISMS to passing certification, with realistic timelines and common pitfalls.

6 min read

ISO 27001 vs SOC 2: Which Do You Need?

ISO 27001 and SOC 2 share significant overlap but serve different markets. Learn when you need which - and how to implement both without duplicating effort.

5 min read

ISO 27001 vs Cyber Essentials: Which First?

A practical comparison of ISO 27001 and Cyber Essentials - scope, cost, timeline, and how to decide which certification your organization needs.

5 min read

ISO 27001 Certification: Is It Worth It?

The real business benefits of ISO 27001 certification - from winning deals faster to reducing risk, and what certification alone will not fix.

5 min read