Christian at ACATO: ISO Auditing, Cybersecurity & Data Protection

ISO 27001 Risk Assessment: Identifying and Managing Information Security Risks

ISO 27001 Risk Assessment: Identifying and Managing Information Security Risks

ISO 27001 risk assessment is the structured process organisations use to identify information security risks, evaluate their likelihood and impact, and decide on proportionate treatments that protect confidentiality, integrity and availability. This article explains how ISO 27001 risk assessment fits into an ISMS, the practical steps from scoping to treatment, and the documentation auditors expect

ISO 27001 Risk Assessment: Identifying and Managing Information Security Risks Read More »

ISO 27001 audit preparation documentation review

ISO 27001 Audit Preparation: A Step-by-Step Guide to Certification

Preparing for an ISO 27001 audit begins with a clear understanding of the standard and a practical, stage-specific plan to align your ISMS with auditor expectations. This guide explains what ISO/IEC 27001:2022 requires, how to run an effective gap analysis, which documents and Annex A controls matter in evidence collection, and how to schedule internal

ISO 27001 Audit Preparation: Your Complete Guide to Getting Ready for Certification Read More »

List of certification bodies in North America

Certification Bodies in North America This List of certification bodies in North America will help you arrange an audit with yourn preferred and accredited certification provider.  Certification Bodies in Canada This is a compact list of different certification bodies operating in Canada (see detailed listing) with different accreditations ( …): DQS Canada Intertek Canada QMI-SAI

List of certification bodies in North America Read More »