Data Classification for ISO 27001, GDPR, NIS2 and DORA
A practical CISO guide to using data classification and information labelling as the evidence layer for ISO/IEC 27001:2022, GDPR Article 32, NIS2 Article 21 and DORA ICT risk management.
#Logging and Monitoring
Articles tagged with "Logging and Monitoring"
42 articles
Secure Remote Access and VPN Governance for NIS2 and DORA
Remote access is no longer a narrow IT topic. In 2026, VPN, MFA, supplier access, endpoint posture, logging and patch evidence must satisfy ISO 27001 auditors, NIS2 management accountability, DORA ICT risk rules and GDPR Article 32 security obligations.
Secure Change Management for NIS2 and DORA
A practical, scenario-driven guide to secure change management using ISO/IEC 27001:2022, Clarysec policies, Zenith Blueprint, and Zenith Controls to support NIS2, DORA, GDPR, NIST CSF 2.0, and audit evidence in 2026.
ISO 27001 Internal Audit for NIS2 and DORA
A practical flagship guide for CISOs, compliance managers and auditors building a unified ISO 27001:2022 internal audit programme that supports NIS2, DORA, GDPR, NIST CSF and COBIT assurance. Includes scope design, sampling, findings, corrective action, cross-compliance mapping and a 2026 evidence calendar.
Continuous Compliance Monitoring for NIS2 and DORA
A practical CISO guide to continuous compliance monitoring for NIS2 and DORA using ISO/IEC 27001:2022, control ownership, KPIs, KRIs, evidence cadence, policy mapping, and audit-ready proof.
CVD for NIS2 and DORA: ISO 27001 Evidence Map
A practical CISO guide to coordinated vulnerability disclosure under NIS2, DORA, GDPR, and ISO/IEC 27001:2022, with policy wording, intake workflow, supplier escalation, audit evidence, and control mapping.
GDPR Article 32 TOMs Evidence with ISO, NIS2 and DORA
A practical guide for building audit-ready GDPR Article 32 technical and organisational measures using ISO 27001:2022, ISO 27005, NIS2, DORA and Clarysec toolkits.
NIS2 Cyber Hygiene Evidence Mapped to ISO 27001
A practical CISO guide to turning NIS2 Article 21 cyber hygiene and cybersecurity training into audit-ready ISO/IEC 27001:2022 evidence, with policy clauses, control mapping, DORA and GDPR alignment, and a 10-day remediation sprint.
ISO 27001 Access Control Audit Evidence Guide
A practical CISO guide to building one access control evidence model for ISO/IEC 27001:2022, NIS2, DORA, GDPR, NIST and COBIT.