Tag: ISO 27001.

Compliance and security teams face the same question from customers, boards and regulators: who is accountable for AI, and where is the evidence? ISO/IEC...

As regulators tighten expectations on operational resilience, IT general controls (ITGC) are moving from back-office hygiene to board-level concern. These controls underpin the security,...

For years, many organisations have treated storage as cheap and deletion as optional. Under European regulation that habit is turning into a compliance problem....

Anyone searching for ISMS examples will likely find generic templates, fictional firms and vague claims about "strong controls". According to compliance platform Copla, that...

For EU-regulated firms, managing technology risk is no longer just sound practice. Under DORA, NIS2 and ISO 27001, it is a legal or contractual...

Phoebus Software has renewed its SOC 2 Type II attestation following an independent assessment by KPMG, with the review covering 89 controls across a...

RegTech firm TAINA has retained its ISO 27001 accreditation after recording what it describes as its strongest audit performance to date, highlighting the growing...

Ask ten people what a compliance management system actually is and expect three different answers, each correct within its own context. According to Copla, the...

Governance, risk and compliance are already present in most organisations, but the difference between running them as a connected system and running them as...

Continuous compliance is often confused with continuous control monitoring, but the two are not the same thing, and the difference is costing firms visibility...