The ISMS.online blog
Planning the business case for an ISMS – Whitepaper
Are you thinking about implementing an Information Security Management System or wanting to elevate your existing one? Or maybe you’re looking at ISO 27001 certification for your organisation. Alliantist CEO, Mark Darby, recently put together a Whitepaper which...
read more
ISO 27001:2013 and ISO 27001:2017 what’s the difference?
The difference in ISO 27001 versions In practical terms, very little has changed between the 2013 and 2017 ISO 27001 standards except for a few minor cosmetic points and a small name change. The latest published version of the ISMS standard is – BS EN ISO/IEC 27001:...
read more
How to develop an Asset Inventory for ISO 27001 – A pragmatic approach
The importance of the Information Asset Inventory for ISO 27001:2013 If you are adopting an asset-based information security risk assessment for ISO 27001:2013, (as well as the ISO 27001:2017 updates) and experts agree it is a robust and pragmatic risk methodology to...
read more
Why GDPR is a good reason to invest in an ISMS now
There are many growing drivers for an organisation and its supply chain to take the subject of information security and privacy seriously. These include major threats from cyber-crime that can kill companies with one simple data breach. Despite that...
read more