Policy Lifecycle Governance for ISO 27001, NIS2, DORA
Policy governance is now evidence governance. Learn how to control ISO/IEC 27001:2022 documented information and build audit-ready evidence for NIS2, DORA and GDPR.
NIST
Explore articles in the NIST category
91 articles
ISO 27001 ISMS Scope for NIS2, DORA and GDPR
A practical CISO guide to defining ISO 27001 ISMS scope across NIS2 essential services, DORA critical or important functions, GDPR processing, assets, suppliers and audit evidence.
Quantitative Cyber Risk Assessment for NIS2 and DORA
A practical guide for CISOs, compliance managers and boards on translating qualitative cyber risks into financial exposure, ISO 27001 evidence, NIS2 oversight and DORA ICT resilience decisions.
14 min
CISA KEV Governance for ISO 27001, NIS2 and DORA
Known exploited vulnerabilities require more than faster patching. This flagship guide shows how to convert CISA KEV and ENISA EUVD intelligence into ISO 27001, NIS2, DORA and GDPR-ready governance evidence.
Transfer Impact Assessments for Cloud in 2026
A practical guide to building audit-ready Transfer Impact Assessments for cloud services, SCCs, subprocessors, supplementary measures, ISO/IEC 27001:2022, NIS2 and DORA evidence.
14 min
CI/CD Pipeline Security Governance for 2026 Audits
A practical CISO guide to governing CI/CD pipelines as auditable software supply chain systems, with build provenance, hardened runners, signed artifacts, deployment evidence and Clarysec policy mappings.
14 min
The CISO's GDPR Playbook for AI: A Guide to SaaS LLM Compliance
This article provides a practical playbook for CISOs to navigate the complex intersection of GDPR and AI. We offer a scenario-driven walkthrough for making SaaS products with LLMs compliant, focusing on training data, access controls, data subject rights, and multi-framework audit readiness.
22 min
From Blueprint to Audit-Ready: Mastering Application Security Requirements for ISO 27001, DORA, and NIS2
This comprehensive guide walks CISOs and security leaders through a proven methodology for mastering application security requirements. Learn to move from reactive fixes to a proactive, ‘security-by-design’ model that satisfies auditors, protects the business, and aligns with major compliance frameworks using Clarysec’s proven policies and toolkits.
18 min
Beyond the Signature: Why Executive Commitment Is the Ultimate Security Control
A signature on a policy is not enough. Discover how to transform executive leadership into your most powerful security asset, with actionable steps, policy examples, and cross-compliance mappings for ISO 27001:2022, NIS2, DORA, and more.
18 min