ISO 42001 Checklist: 7 Clauses, 38 Controls, 1 Big Mistake
An ISO 42001 checklist covering both halves: the 7 mandatory clauses and the 38 Annex A controls, plus the Statement of Applicability mistake to avoid.
Read More
Annex SL Explained: The Best Guide to 10 ISO Clauses
Annex SL is the harmonized structure behind ISO 9001, 14001, 27001 and 45001. The 10 clauses explained, the 2021 rename, and which standards are not on it.
Read More
NIST Privacy Framework vs ISO 27701: Which One in 2026?
NIST Privacy Framework vs ISO 27701: a free risk model against a certifiable management system. Which to start with, and how to run both together.
Read More
NERC CIP vs IEC 62443: A Clear 2026 Comparison
NERC CIP vs IEC 62443 compared: mandatory versus voluntary, impact ratings versus zones and conduits, and how to run both without two disconnected programmes.
Read More
ISO 27018: A Clear Guide to the 2025 Cloud Privacy Rules
ISO 27018 applies in one narrow case: public cloud, personal data, acting as processor. The 6 obligations that carry commercial weight, and why no certificate.
Read More
ISO 28000: A Clear Guide to the 2022 Security Standard
ISO 28000 was retitled and widened in 2022. What the current edition requires, the 6 clause 8 requirements, and what to do with older documents.
Read More
ISO 22301 Risk Assessment: A Clear Guide to Clause 8.2
The ISO 22301 risk assessment is the half of clause 8.2 that gets skipped. What it covers, how it differs from the BIA, and how it drives continuity strategy.
Read More
Risk Criteria: A Clear Guide to Setting Them Under ISO 31000
Risk criteria under ISO 31000: the 6 decisions to make before assessing anything, how they differ from risk appetite, and how to write a scale people can apply.
Read More
ISO 27701 Controls: A Clear Guide to the 3 Annex A Tables
The ISO 27701 controls now sit in one Annex A with 3 tables - controller, processor and shared security controls. What each covers and how to map them.
Read More
ISO 42001 Policy Template: A Clear Guide to the AI Set
An ISO 42001 policy template is rarely one document. The 7 policies an AI management system needs, the change-control gap, and the registers behind them.
Read More