DORA Testing Programme: Map Tests to ISO 27001
A practical guide for CISOs, compliance managers and ICT providers to govern a DORA digital operational resilience testing programme and turn every test into reusable ISO/IEC 27001:2022 audit evidence.
#Incident Response
Articles tagged with "Incident Response"
56 articles
Incident Severity Classification for DORA, NIS2 and GDPR
A practical guide to building a unified incident severity classification model that maps DORA major ICT incidents, NIS2 significant incidents and GDPR breach risk to ISO/IEC 27001:2022 evidence.
VEX and CSAF: Auditable Vulnerability Evidence
VEX and CSAF are becoming the evidence layer between SBOMs, supplier advisories, vulnerability triage and regulatory proof. This guide shows how to govern vulnerability status decisions across ISO 27001, NIS2, DORA, GDPR and CRA.
ISO 27001 Audit Evidence for NIS2 and DORA
Learn how to use ISO/IEC 27001:2022 internal audit and management review as a unified evidence engine for NIS2, DORA, GDPR, supplier risk, customer assurance and board accountability.
ISO 27001 Logging Evidence for NIS2, DORA and GDPR
A practical guide to building audit-ready ISO/IEC 27001:2022 logging and monitoring evidence for NIS2, DORA and GDPR, with control mapping, policy clauses, incident workflows, supplier logging requirements and evidence pack guidance.
NIS2 and DORA Contact Registers for ISO 27001
A regulatory contact register is no longer administrative housekeeping. For NIS2, DORA, GDPR and ISO/IEC 27001:2022, it is operational evidence that your organization can notify the right authority, supervisor, supplier or executive before the clock runs out.
Cyber Incident Legal Hold for GDPR, NIS2 and DORA
A practical CISO guide to cyber incident legal hold and evidence retention, mapped to ISO/IEC 27001:2022, GDPR, NIS2, DORA, NIST CSF 2.0 and COBIT 2019.
NIS2 2024/2690 ISO 27001 Cloud Provider Map
A unified NIS2 Implementing Regulation 2024/2690 to ISO/IEC 27001:2022 control mapping for cloud, MSP, MSSP and data centre providers. Includes Clarysec policy clauses, audit evidence, DORA and GDPR alignment, and a practical implementation roadmap.
NIS2 Evidence Mapping with ISO 27001:2022 for 2026
A flagship guide for CISOs, compliance managers and business leaders who need to turn NIS2 Article 21 technical measures into ISO 27001:2022 controls, policies, owners, records and defensible evidence.