Resources · Blog
Tag: Posture
3 published posts.
Posts tagged “Posture”
- GuideISO 27001· 5 min read
ISO 27001 clause 9 without the slide deck: internal audit and management review on a derived posture
Clause 9 asks for monitoring, internal audit and management review. When posture is computed from records, the review is a delta between two frozen snapshots.
Read → - ArticleDORANIS2ISO 27001· 4 min read
Evidence recency: why "twelve months" is not a rule, and what to measure instead
Auditors do not ask how old evidence is; they ask whether it still shows the control operating. Measure recency per control against its own review period.
Read → - ArticleDORANIS2ISO 27001· 4 min read
Why a compliance percentage should never be typed into a box
A posture number somebody typed is a slide, not a fact. What deriving posture from adoption, applicability, coverage and evidence means — and why you freeze it.
Read →
See it on your own frameworks
A walkthrough on a workspace set up for your sector. No trial sign-up, no credit card.