Resources

Resources — Articles

Every published article on the hub, newest first. Switch type or framework below.

Articles

ArticleDORANIS2ISO 27001· 4 min read
A backup restore drill is evidence — if you record it like one
DORA, NIS2 and ISO 27001 ask whether you can restore, not whether you back up. What turns a restore test into evidence: date, scope, control, the gap it found.
Read →
ArticleDORANIS2ISO 27001· 5 min read
Four-eyes per flow: what a second approver actually changes — and when a single-admin tenant may switch it off
Segregation of duties is only real when the system refuses a self-approval. Which three flows carry it, what an approver may do, how an exception is audited.
Read →
ArticleDORANIS2ISO 27001· 4 min read
Evidence recency: why "twelve months" is not a rule, and what to measure instead
Auditors do not ask how old evidence is; they ask whether it still shows the control operating. Measure recency per control against its own review period.
Read →
ArticleDORANIS2ISO 27001· 4 min read
Why a compliance percentage should never be typed into a box
A posture number somebody typed is a slide, not a fact. What deriving posture from adoption, applicability, coverage and evidence means — and why you freeze it.
Read →

A walkthrough on a workspace set up for your sector. No trial sign-up, no credit card.