ISO 27001 asset management explained: asset inventory, ownership, classification and media handling (2013 A.8), mapped to ISO 27001:2022 controls.
ISO 27001 human resource security: screening, employment terms, awareness training and exit (2013 A.7), mapped to the ISO 27001:2022 people controls.
Organization of information security in ISO 27001: roles, segregation of duties, mobile devices and remote work (2013 A.6), mapped to ISO 27001:2022.
How to write an information security policy for ISO 27001: purpose, structure and review (2013 A.5), now control 5.1 in ISO 27001:2022.
All 93 ISO/IEC 27001:2022 Annex A controls in four themes, the 11 new controls, and a full mapping from the 114 controls of the 2013 edition.
What is an ISMS (information security management system)? Learn the concept, business benefits and how the PDCA cycle supports continual improvement.
An introduction to ISO/IEC 27001: what the standard covers, ISMS requirements, scope, certification and the 93 Annex A controls of the 2022 edition.
The ISO/IEC 27000 series explained: what each 2700X standard covers, including ISO 27001 and 27002, and how they fit together in an ISMS.
How to audit company projects: what auditors check in project planning, governance, budgets, risks and delivery, with a practical audit approach.
How to audit cloud computing and outsourced operations: contracts, shared responsibility, security controls, compliance and vendor risk.
