DSAR, Erasure and ISO 27001 Evidence in 2026
Learn how to turn GDPR data subject rights into audit-ready DSAR, erasure and restriction workflows using ISO/IEC 27001:2022, Clarysec policies, Zenith Blueprint and Zenith Controls.
COBIT 2019
Explore articles in the COBIT 2019 category
96 articles
ISO 27001 Threat Intelligence for NIS2 and DORA
A practical guide for CISOs, compliance managers, auditors, and business owners on turning threat intelligence into ISO 27001 risk decisions, NIS2 cyber hygiene evidence, DORA ICT risk evidence, and defensible audit records.
15 min
Cloud Region Governance for GDPR, NIS2 and DORA
A practical CISO guide to governing cloud regions, backups, logs, support access and subcontractors through ISO/IEC 27001:2022, GDPR, NIS2 and DORA.
14 min
ENISA EUVD 2026: ISO 27001 for NIS2 and CRA
ENISA EUVD will change how EU organizations consume vulnerability intelligence, manage CVD, coordinate suppliers, and evidence NIS2, DORA, GDPR and CRA reporting decisions. This guide shows how ISO/IEC 27001:2022, Clarysec policies, Zenith Blueprint and Zenith Controls turn vulnerability alerts into an auditable operating model.
Data Classification for ISO 27001, GDPR, NIS2 and DORA
A practical CISO guide to using data classification and information labelling as the evidence layer for ISO/IEC 27001:2022, GDPR Article 32, NIS2 Article 21 and DORA ICT risk management.
14 min
Secure Remote Access and VPN Governance for NIS2 and DORA
Remote access is no longer a narrow IT topic. In 2026, VPN, MFA, supplier access, endpoint posture, logging and patch evidence must satisfy ISO 27001 auditors, NIS2 management accountability, DORA ICT risk rules and GDPR Article 32 security obligations.
15 min
SBOMs for ISO 27001, NIS2 and DORA Assurance
SBOMs are now core evidence for software supply chain assurance. This guide shows how to operationalize SBOMs through ISO 27001:2022, NIS2, DORA, GDPR, NIST CSF 2.0, COBIT 2019 and Clarysec policies.
Business Impact Analysis for ISO 27001, NIS2 and DORA
A modern Business Impact Analysis connects critical services, ICT assets, suppliers, recovery objectives, continuity testing, and management approval into one defensible evidence chain for ISO/IEC 27001:2022, NIS2, DORA, GDPR, NIST CSF 2.0, and COBIT 2019.
Secure Change Management for NIS2 and DORA
A practical, scenario-driven guide to secure change management using ISO/IEC 27001:2022, Clarysec policies, Zenith Blueprint, and Zenith Controls to support NIS2, DORA, GDPR, NIST CSF 2.0, and audit evidence in 2026.
13 min