Risk Management with ISO 27005
ISO 27005 is the standard for information security risk management and a central part of ISO 27001 and an ISMS. This guide gives you a concrete, practical approach to identifying, analysing and treating risks. What You G…
Implementing GDPR
This whitepaper enables you to implement the EU GDPR correctly, verifiably, and resource-efficiently. The whitepaper will: Give you an overview of the highlights in the regulation Show you how and why it differs from the…
Measuring Your Information Security
Get a head start on measuring your ISMS's performance. This guide helps you establish the key metrics and processes needed for ISO 27001 compliance. It includes a curated list of KPIs—complete with suggested targets, typ…
How To Develop a Statement of Applicability according to ISO 27001
A Statement of Applicability (SoA) is a mandatory document in ISO 27001 — but it's also where many ISMS projects stall. Listing your controls isn't enough; you need to justify why each control from Annex A is included or…
Bridging the Knowledge–Action Gap. From Static Compliance to Behavioural Cyber Resilience
Organisations are investing more than ever in security awareness and training. Yet many employees still bypass security rules in their daily work. Why? In this whitepaper, we explore the Knowledge–Action Gap — the discon…
From Project to Process
An annual compliance plan gives you a clear overview of your security tasks and helps you document your resource needs more effectively. In this guide, you’ll gain: A deeper understanding of the difference between projec…
How To Handle GDPR Breaches
Has your organisation done everything in its power to protect personal data — before, during and after a security breach? Both private and public organisations must be able to answer that question with an unequivocal yes…
