ISO 37001:2025 Anti-Bribery: What the New Edition Requires
ISO 37001:2025 is the current edition and the 2016 standard is withdrawn. What the anti-bribery management system requires,…
Read More
CCPA Compliance in 2026: Every New Deadline Explained
CCPA compliance changed on 1 January 2026. The risk assessment, ADMT and cybersecurity audit deadlines, read from the…
Read More
ISO 31000 Risk Management: The 3 Components Explained
ISO 31000:2018 explained — the three components, why there is no certification, and the third edition now at…
Read More
CIS Controls v8.1: The 18 Controls and 3 Implementation Groups
A practical guide to CIS Controls v8.1 — the 18 Controls, the 153 Safeguards, and how the three…
Read More
Cyber Essentials Certification: The Five Controls
Cyber Essentials certification explained: the five technical controls, why scope decides the outcome, and the four failures that…
Read More
FedRAMP Authorization: What FedRAMP 20x Changed
FedRAMP authorization has changed. 20x is past the pilots and in wide-scale adoption, Key Security Indicators replaced yearly…
Read More
CMMC Compliance: The Four-Phase Rollout Explained
CMMC compliance explained: the three levels, the four phases, and why Phase 2 on 10 November 2026 is…
Read More
CRA Product Classification: Default, Class I, Class II, Critical
Classification decides whether you need a notified body. Article 7(1) contains the two rules that settle most cases,…
Read More
CRA Conformity Assessment: Do You Need a Notified Body?
No harmonised standard has been cited under the CRA, so Article 32(2) currently sends every Annex III product…
Read More
The CRA Reporting Deadline: 11 September 2026
Article 14 applies from 11 September 2026, and Article 69(3) reaches products you placed on the market years…
Read More
EU CRA: The Cyber Resilience Act Explained
What Regulation (EU) 2024/2847 requires, the four dates that matter, and the provisions manufacturers reliably get wrong.
Read More
ISO 42001 vs the EU AI Act: Standard, Regulation, and How They Fit
ISO 42001 vs the EU AI Act: one is a voluntary certifiable standard, the other binding law. What…
Read More