The ISMS.online blog
How to develop an Asset Inventory for ISO 27001 – A pragmatic approach
The importance of the Information Asset Inventory for ISO 27001:2013 If you are adopting an asset-based information security risk assessment for ISO 27001:2013, (as well as the ISO 27001:2017 updates) and experts agree it is a robust and pragmatic risk methodology to...
read more
Why GDPR is a good reason to invest in an ISMS now
There are many growing drivers for an organisation and its supply chain to take the subject of information security and privacy seriously. These include major threats from cyber-crime that can kill companies with one simple data breach. Despite that...
read more
The NIST Cybersecurity Framework gets a reboot with Version 1.1
The NIST Cybersecurity Framework is the US standard regulated by the National Institute is Standards and Technology. The original version set out in February 2014 has now been updated to Version 1.1. Let's take a look at what's changed. What is the NIST Cybersecurity...
read more
5 steps to success for GDPR
Actions speak louder than words, and the same can be said for GDPR. It's not enough to simply say that you're compliant with the Data Protection Act updates. The challenges are about showing that you're compliant and that you are able to manage it on an ongoing basis....
read more