Practical compliance guides
Step-by-step guides to getting certified and staying audit-ready, written from real implementation work rather than from the standard text.
ISO 27001 Certification: From Preparation to Recertification
ISO 27001 certification: prerequisites, the Stage 1 and Stage 2 audits, nonconformities, the three-year cycle, cost blocks and time to certificate.
Implementing an ISMS: structure, risk process and operation
Implementing an ISMS in eight steps under ISO/IEC 27001: purpose, scope, assets, risks, controls, governing documents, operation and effectiveness review.
EU AI Act summary: obligations, risk classes and deadlines
The EU AI Act (Regulation (EU) 2024/1689) summarised: risk classes, prohibitions, provider and deployer duties and the deadlines after the Digital Omnibus.
Building a Business Continuity Management System (BCMS)
Building a business continuity management system: BIA, RTO and RPO, strategies, emergency plans and exercises under BSI-Standard 200-4, ISO 22301 and DORA.