ISO 27001

20th June 2024

What Is ISO 27001? Understanding the Basics

You’ve done everything right with your potential new client. In fact, you’re amazed that each step in the process has gone as smoothly as it has. You’re just one call away from closing your deal. They’re a big name, and your company can add tremendous value to theirs. The best part? The opportunity is both…

11th May 2023

ISO 27001 ISMS Requirements

You’ve heard its name in the breeze and in hushed whispers. A certification to rival SOC 2, HIPAA, perhaps even FedRAMP. Your sales team wants it, your customers want you to have it. That’s right! All the way from Geneva, Switzerland, it’s ISO 27001! ISO 27001 is the cool kid of the cyber security certifications…

8th December 2022

What is a cybersecurity compliance audit actually like?

“You’re going to be audited by the IRS.” Is not a phrase most people would want to hear – so it makes sense that the word “audit” carries some negative weight. Being “audited” is something most people would normally prefer to avoid. In the cybersecurity compliance world, “audit” is a common common phrase, and a…

3rd November 2022

Three things to know about the new ISO 27001:2022 standard.

ISO 27001 and America’s pastime have something in common this year. Even a historic pastime like baseball, which values tradition, changes its rules every once in a while to respond to developments in the sport and the needs of its players and fans. For 2023, pitch timers will be introduced to speed up the game,…

22nd December 2021

What does a bad auditor mean for your business?

Cybersecurity compliance evaluations like SOC 2, ISO 27001, and HIPAA might have one set of standards set by one overseeing organization, but the independent auditors who audit companies for these standards can have drastically different approaches. The result? Programs that are compliant being forced to do extra, meaningless work – or worse – companies that…

5th May 2021

SOC 2 vs ISO 27001: What’s the Difference?

SOC 2 and ISO 27001 take two different approaches to the same problem. Both will have you improving your security program, but in different ways. It’s important to understand the differences between the two, even if your ultimate decision might be the result of something else altogether.

19th November 2020

Three Keys to a Great Internal Audit

I don’t remember much about middle school. It was the 80s, though, and things were certainly different back then. We had real chalk boards (with erasers that needed periodic clapping), gender-separated gym classes, and junk food and soda in the vending machines. One memory, in particular, has stayed with me. It happened in science class…

29th October 2019

Sales troubles? Call the cybersecurity specialist!

It is so non-intuitive. Yet, each time I try to explain it, I get puzzled looks. This is usually how it goes…. “I help business leaders create a cybersecurity program and story to unblock sales.” “Huh?” But it is true. More often than not our clients make the decision to hire us because they are…