Tag: ISO 27001

Posts tagged “ISO 27001”

• GuideISO 27001· 5 min read

  ISO 27001 clause 9 without the slide deck: internal audit and management review on a derived posture

  Clause 9 asks for monitoring, internal audit and management review. When posture is computed from records, the review is a delta between two frozen snapshots.

  Read →
• ArticleDORANIS2ISO 27001· 4 min read

  A backup restore drill is evidence — if you record it like one

  DORA, NIS2 and ISO 27001 ask whether you can restore, not whether you back up. What turns a restore test into evidence: date, scope, control, the gap it found.

  Read →
• GuideISO 27001· 5 min read

  The Statement of Applicability is a decision log, not a checklist

  ISO/IEC 27001 asks for the one thing most SoAs lack: the reason. Keeping applicability, justification and implementation status as records that outlive audits.

  Read →

← All posts