Data Classification for ISO 27001, GDPR, NIS2 and DORA
A practical CISO guide to using data classification and information labelling as the evidence layer for ISO/IEC 27001:2022, GDPR Article 32, NIS2 Article 21 and DORA ICT risk management.
#Data Protection
Articles tagged with "Data Protection"
51 articles
Secure Remote Access and VPN Governance for NIS2 and DORA
Remote access is no longer a narrow IT topic. In 2026, VPN, MFA, supplier access, endpoint posture, logging and patch evidence must satisfy ISO 27001 auditors, NIS2 management accountability, DORA ICT risk rules and GDPR Article 32 security obligations.
ISO 27001:2022 Training Evidence for NIS2 and DORA
A practical CISO playbook for building audit-ready, role-based security awareness training evidence across ISO/IEC 27001:2022, NIS2, DORA, GDPR and NIST.
NIST CSF 2.0 Govern for SMEs and ISO 27001
A practical SME guide to using the NIST CSF 2.0 Govern Function as the governance layer for ISO 27001:2022, NIS2, DORA, GDPR, supplier oversight, and audit-ready evidence.
CVD for NIS2 and DORA: ISO 27001 Evidence Map
A practical CISO guide to coordinated vulnerability disclosure under NIS2, DORA, GDPR, and ISO/IEC 27001:2022, with policy wording, intake workflow, supplier escalation, audit evidence, and control mapping.
GDPR Article 32 TOMs Evidence with ISO, NIS2 and DORA
A practical guide for building audit-ready GDPR Article 32 technical and organisational measures using ISO 27001:2022, ISO 27005, NIS2, DORA and Clarysec toolkits.
NIS2 Cyber Hygiene Evidence Mapped to ISO 27001
A practical CISO guide to turning NIS2 Article 21 cyber hygiene and cybersecurity training into audit-ready ISO/IEC 27001:2022 evidence, with policy clauses, control mapping, DORA and GDPR alignment, and a 10-day remediation sprint.
ISO 27001 Access Control Audit Evidence Guide
A practical CISO guide to building one access control evidence model for ISO/IEC 27001:2022, NIS2, DORA, GDPR, NIST and COBIT.
ISO 27001:2022 Failed Audit Recovery Plan
If your ISO 27001:2022 transition was missed or failed, the recovery path is disciplined triage, evidence repair, root cause analysis, SoA rebuild, and corrective action. This guide explains how Clarysec uses Zenith Blueprint, policies, and Zenith Controls to restore audit confidence.