The Participant List
Before every ISO 27001 Lead Implementer class, I read the participant list. This time it made me smile. A personal story about what I bring to the room, and what the room always gives back.
The Participant List Read More »
ISO 27001 implementation
How NIS2 Affects Bosnian Companies — Even Though We’re Not in the EU
NIS2 is an EU regulation — but if your Bosnian company works with EU clients, it already affects you. Find out why, and what you can do about it right now.
How NIS2 Affects Bosnian Companies — Even Though We’re Not in the EU Read More »
ISO 27001 and DORA Compliance: How Closely Aligned Are They?
Already using ISO 27001 or thinking about it? See how it puts you 80% on the path to DORA compliance—and what steps you still need to take…
ISO 27001 and DORA Compliance: How Closely Aligned Are They? Read More »
Avoiding Common Pitfalls in ISO 27001 Implementation
“By failing to prepare, you are preparing to fail.” These words from Benjamin Franklin are especially meaningful when implementing ISO 27001. The standard’s generalized and flexible structure is designed to
Avoiding Common Pitfalls in ISO 27001 Implementation Read More »
Integrating Management Systems – A Strategic Advantage
Integrating ISO 9001, 27001, 22301, and 20000 offers a streamlined approach to management, where each standard complements the others. ISO 9001 (Quality Management) sets the foundational framework for managing organizational
Integrating Management Systems – A Strategic Advantage Read More »
First Steps: Setting Objectives for Your ISMS
One of the initial steps in implementing ISO 27001 is setting clear objectives for your Information Security Management System (ISMS). These objectives provide direction for your security efforts and align
First Steps: Setting Objectives for Your ISMS Read More »
First Steps: Performing a Risk Assessment
A critical early step in implementing ISO 27001 is conducting a risk assessment. This process helps identify the potential risks to your organization’s information assets and evaluate the likelihood and impact
First Steps: Performing a Risk Assessment Read More »
First steps: Conducting a Gap Analysis
Before jumping into the full ISO 27001 implementation process, it’s important to conduct a gap analysis. A gap analysis compares your organization’s current information security measures against the requirements of
First steps: Conducting a Gap Analysis Read More »
First Steps: Identifying Information Assets
The first crucial step in ISO 27001 implementation is identifying your information assets. This process involves cataloging all assets that handle or store sensitive information, such as customer data, financial
First Steps: Identifying Information Assets Read More »
First Steps: Creating an Information Security Policy
An essential early step in implementing ISO 27001 is creating a formal Information Security Policy. This high-level document outlines your organization’s overall approach to information security and the framework that
First Steps: Creating an Information Security Policy Read More »