Articles tagged with "Supplier Management"
A practical guide for defining, approving, monitoring, evidencing, and defending vulnerability remediation SLAs across ISO/IEC 27001:2022, NIS2, DORA, GDPR, NIST CSF 2.0, and COBIT 2019 audit expectations.
A practical guide for CISOs, compliance managers and ICT providers to govern a DORA digital operational resilience testing programme and turn every test into reusable ISO/IEC 27001:2022 audit evidence.
A practical guide to building a unified incident severity classification model that maps DORA major ICT incidents, NIS2 significant incidents and GDPR breach risk to ISO/IEC 27001:2022 evidence.
VEX and CSAF are becoming the evidence layer between SBOMs, supplier advisories, vulnerability triage and regulatory proof. This guide shows how to govern vulnerability status decisions across ISO 27001, NIS2, DORA, GDPR and CRA.
Learn how to use ISO/IEC 27001:2022 internal audit and management review as a unified evidence engine for NIS2, DORA, GDPR, supplier risk, customer assurance and board accountability.
A practical guide to building audit-ready ISO/IEC 27001:2022 logging and monitoring evidence for NIS2, DORA and GDPR, with control mapping, policy clauses, incident workflows, supplier logging requirements and evidence pack guidance.
Learn how to build audit-ready PII protection controls by extending ISO/IEC 27001:2022 with ISO/IEC 27701:2025 and ISO/IEC 29151:2022, mapped to GDPR, NIS2, DORA, NIST-style assurance, and COBIT 2019 governance expectations.
A regulatory contact register is no longer administrative housekeeping. For NIS2, DORA, GDPR and ISO/IEC 27001:2022, it is operational evidence that your organization can notify the right authority, supervisor, supplier or executive before the clock runs out.
Turn cryptographic control exceptions from audit risk into proof of ISMS maturity. This flagship guide unites narrative and technical detail, with policy clauses, control mappings, and actionable evidence checklists.