Blog
Read all about our product updates, industry news, and helpful compliance tips.
All ISO 27001
24 posts
When customers ask for SOC 2 and what they really mean
Customers asking for SOC 2 sometimes want something different from what they say. Learn what they're looking for, how to respond without a report, and how to avoid costly delays.
NIS2 checklist: what you need to have in order to be compliant
The Cybersecurity Act is expected to come into force on 1 July 2026. Discover the six pillars you need to have in place now to be NIS2-compliant.
Is your startup too small for ISO 27001? Three triggers to start now
Three triggers that say you should start with ISO 27001 now and three scenarios where waiting is smarter, including costs and timelines.
From first compliance step to audit with 0 findings: how Aivory achieved ISO 27001 and NEN 7510 in three months
Aivory earned ISO 27001 and NEN 7510 in three months with zero audit findings. See how this dental AI start-up moved fast without cutting corners.
Controls: what are they and how do you use them?
What are controls, what types exist and how do they work within ISO 27001? Learn how to set up effective controls management in your organisation.
Performing a risk assessment: methods, models and tools
Learn what a risk assessment is, which methods exist, how to work through it step by step, and which mistakes organisations make most often.
What is GRC and why do modern businesses need a GRC platform?
GRC stands for Governance, Risk and Compliance. What it means, why silos break down, and when a GRC platform makes sense for your organisation.
SOC 2 for startups: becoming compliant without losing speed
Discover how startups implement SOC 2 without losing their development speed. Practical tips on change management, Type I vs Type II and smart first steps.
Individual security measures are not yet NIS2 compliance
Individual measures create a false sense of security. Discover how to make the move to structural NIS2 compliance with ownership, risk analysis, and continuous visibility.
How to choose the right ISO 27001 software for your company
From basic principles to practical choices: discover what to look for when choosing ISO 27001 software and how automation accelerates your certification journey.
Cybersecurity for startups: where to begin without making it complex
Cybersecurity doesn't have to be overwhelming for startups. Discover which basic measures make a difference and how to organise security smartly without slowing down your development pace.
ISO 27001 vs ISO 27002: what's the difference and what do you need
ISO 27001 and ISO 27002 contain the same controls, but are fundamentally different. Learn the difference and when you need which document.
ISO 27001 costs: What does certification really cost your organisation?
Audit costs are often the smallest line item. Discover all the cost components of ISO 27001: internal time, audit, tooling and maintenance, with realistic figures.
NIS2 for suppliers to NIS2-obligated organizations: what do you need to arrange now?
Not NIS2-obligated but still receiving a questionnaire from a client? Read how you as a supplier can meet chain obligations via SC, CyFun, or ISO 27001.
The fastest way to get ISO 27001 certified as a startup
Deal on the line and no ISO 27001 certificate? Discover why the 4-week promise doesn't work and what the fastest responsible route to certification really is.
ISO 27001 reference guide: complete overview of requirements and implementation
Detailed information about ISO 27001 requirements, controls library, documentation checklist, and certification process. Use this comprehensive guide as a reference during your implementation project.
The 7 Biggest ISO 27001 pitfalls (and how to avoid them)
Learn to recognise and solve the biggest mistakes in ISO 27001 implementation before they delay your project. Practical guidance to keep your certification on track.
Planning your ISO 27001 journey: from start to certificate
A concrete roadmap from zero to ISO 27001 certificate in 10-18 weeks. Discover which phases you go through, how much time it takes, and how to stay on track.
ISO 27001 Scoping: How to define smart boundaries for faster results
Learn how to scope ISO 27001 intelligently for less work and more impact. Practical guidance, examples and tips for an efficient certification journey.
Improving IoT security with ISO 27001
Discover how ISO 27001 helps secure IoT systems and reduce risks within your organisation.
ISO 27001 practical tips: Direct steps for a secure organisation
Discover practical ISO 27001 tips you can apply today. From prioritising risks to basic controls and evidence. Simple steps for a secure and compliant organisation.
ISO 27001 | What is it and when to start?
A complete guide on ISO 27001: what it entails, why it matters, and why starting early saves you time and stress. Discover how modern technology makes implementation simpler.
Do You Really Need to Certify Everything? The Scoping Guide for SOC 2 and ISO 27001
No, and that saves months of work. Discover how to determine scope for SOC 2 and ISO 27001 without compromising your security.
Cyber security: when and where to start?
Cyber attacks on small and medium-sized companies are on the rise. But when should you implement security measures, take insurance, or obtain certification?