Explore articles in the COBIT 2019 category
A practical CISO playbook for governing biometric authentication, onboarding, workplace access and fraud controls through GDPR accountability, ISO/IEC 27701:2025 PIMS evidence, ISO/IEC 27001:2022 controls and Clarysec cross-compliance mapping.
Identity attacks now create regulatory exposure across ISO 27001, NIS2, DORA and GDPR. This guide shows how to build a unified ITDR program with Clarysec policies, Zenith Blueprint and Zenith Controls.
A practical guide for proving ISO 27001 climate change amendment readiness through ISMS context, interested parties, risk assessment, SoA rationale, business continuity, supplier assurance, and management review evidence.
A practical guide to building defensible, role-based privacy awareness training for ISO/IEC 27701:2025, GDPR accountability, NIS2, DORA, NIST, and COBIT.
A practical CISO and privacy leader guide to governing PII collection, internal use, secondary use and external disclosure under ISO/IEC 27701:2025, GDPR and Clarysec PIMS toolkits.
Dangling DNS is not only a cloud hygiene issue. It is evidence of whether asset ownership, change control, vulnerability management, supplier governance and incident response actually work.
MFA fatigue is not a user problem or a single identity provider setting. It is an access governance, monitoring, training, incident response and evidence challenge that must stand up to ISO 27001:2022, NIS2, DORA and GDPR scrutiny.
A practical, audit-ready governance model for subprocessor change notifications, customer objections, DPA updates, transfer evidence, and supplier risk controls.
Shadow APIs, weak tokens, missing rate limits and inconsistent logs are now governance failures. This flagship guide shows CISOs how to build API security evidence for ISO/IEC 27001:2022, NIS2, DORA, GDPR, NIST CSF 2.0 and COBIT-aligned audits.