Firewall Rule Review for ISO 27001, NIS2, DORA, GDPR
A practical guide to governing network segmentation and firewall rule reviews as ISO/IEC 27001:2022 evidence for NIS2 cyber hygiene, DORA ICT risk management and GDPR Article 32.
COBIT 2019
Explore articles in the COBIT 2019 category
113 articles
Cyber Incident Legal Hold for GDPR, NIS2 and DORA
A practical CISO guide to cyber incident legal hold and evidence retention, mapped to ISO/IEC 27001:2022, GDPR, NIS2, DORA, NIST CSF 2.0 and COBIT 2019.
16 min
Risk-Based Vulnerability Prioritization for 2026
A practical CISO guide to audit-ready, risk-based vulnerability prioritization using CVSS 4.0, EPSS, KEV, EUVD, asset criticality, ISO 27001, NIS2, DORA, GDPR, NIST and COBIT.
NIS2 2024/2690 ISO 27001 Cloud Provider Map
A unified NIS2 Implementing Regulation 2024/2690 to ISO/IEC 27001:2022 control mapping for cloud, MSP, MSSP and data centre providers. Includes Clarysec policy clauses, audit evidence, DORA and GDPR alignment, and a practical implementation roadmap.
16 min
MDR Provider Oversight for NIS2, DORA and GDPR
Outsourcing MDR does not outsource accountability. This flagship guide shows how to govern MDR providers with ISO/IEC 27001:2022 evidence mapped to NIS2, DORA, GDPR, NIST CSF 2.0 and COBIT 2019.
Test Data Protection in 2026: ISO 27001 to DORA
Non-production environments are now a serious audit target. This guide shows how to protect test data, staging systems and QA workflows with ISO/IEC 27001:2022 evidence mapped to GDPR, NIS2, DORA, NIST and COBIT.
NIS2 Evidence Mapping with ISO 27001:2022 for 2026
A flagship guide for CISOs, compliance managers and business leaders who need to turn NIS2 Article 21 technical measures into ISO 27001:2022 controls, policies, owners, records and defensible evidence.
15 min
Post-Quantum Cryptography Migration with ISO 27001
A practical CISO guide for building a quantum-ready cryptography migration plan using ISO/IEC 27001:2022, ISO/IEC 27002:2022, NIST PQC standards, and Clarysec’s audit-ready toolkits.
15 min
DNS Governance in 2026: Audit-Ready Registrar Controls
DNS and domain registrar governance is now a board-level resilience issue. This guide shows how to turn DNSSEC, registry lock, registrar access, zone changes and monitoring into defensible compliance evidence.