Resources · Blog
Tag: Evidence
5 published posts.
Posts tagged “Evidence”
- ArticleDORANIS2ISO 27001· 4 min read
A backup restore drill is evidence — if you record it like one
DORA, NIS2 and ISO 27001 ask whether you can restore, not whether you back up. What turns a restore test into evidence: date, scope, control, the gap it found.
Read → - ArticleDORANIS2ISO 27001· 4 min read
Evidence recency: why "twelve months" is not a rule, and what to measure instead
Auditors do not ask how old evidence is; they ask whether it still shows the control operating. Measure recency per control against its own review period.
Read → - GuideDORANIS2ISO 27001· 5 min read
Applicability has five scopes — and "tenant-wide" is usually the wrong first answer
A requirement rarely applies to a whole organisation. Deciding applicability per asset, IT service, business solution or process makes "not applicable" hold up.
Read → - ArticleDORANIS2ISO 27001· 4 min read
Why a compliance percentage should never be typed into a box
A posture number somebody typed is a slide, not a fact. What deriving posture from adoption, applicability, coverage and evidence means — and why you freeze it.
Read → - GuideISO 27001· 5 min read
The Statement of Applicability is a decision log, not a checklist
ISO/IEC 27001 asks for the one thing most SoAs lack: the reason. Keeping applicability, justification and implementation status as records that outlive audits.
Read →
See it on your own frameworks
A walkthrough on a workspace set up for your sector. No trial sign-up, no credit card.