Some time ago a friendly colleague reached out to me asking about ISO 27001. The questions were simple but got me thinking. I then realized…View More What Is ISO 27001, ISMS and Do We Need It?
If you think writing a bunch of information security documents is enough to get ISO 27001 certificate, you’re wrong. You need to implement all the activities described…View More Becoming ISO 27001 certified – How to prepare for certification audit
Most of us in the IT security business know that compliance isn’t the same as security. Compliance is an auditing, paperwork, checklist mentality. Security is…View More 5 ways compliance hurts security