Daily Archives: April 10, 2023

Introduction: In today’s digital age, information security incidents, privacy breaches, piracy, hacking, fraud, and industrial espionage are becoming increasingly common.  As a result, it is crucial for organizations to have a robust disciplinary process in place to deal with these types of incidents.  The A.7.2.3 control of the ISO 27001 […]

Introduction: In today’s digital age, information security has become a critical concern for organizations of all sizes and types.  Cyber threats, such as hacking, phishing, and ransomware attacks, pose a significant risk to the confidentiality, integrity, and availability of sensitive data.  To mitigate these risks, organizations must implement an Information […]

Introduction: ISO 27001 is an international standard that outlines the best practices for information security management.  The standard includes various sections, each of which covers specific aspects of information security management.  One of these sections is A.7.2.1, which deals with management responsibilities related to information security.  This section outlines the […]

Introduction: In the modern age of technology and the internet, information security has become an increasingly important concern for individuals, organizations, and governments worldwide.  One of the key factors that contribute to the success of any information security program is ensuring that all employees are aware of their roles and […]

Introduction: Pre-employment screening is an essential step in ensuring that organizations hire the right people for the job while protecting their assets, reputation, and employees. A.7.1.1 of the ISO 27001 standard highlights the importance of pre-employment screening and provides a checklist of requirements that organizations should follow.  In this article, […]

Introduction: As more companies shift to remote work or allow employees to use personal mobile devices for work-related tasks, it is essential to establish policies and security controls to mitigate the risks that these devices can pose.  A mobile device policy is necessary to ensure that all portable systems, including […]

Introduction: Project management is an essential part of any organization’s operations, especially in the implementation of new systems, applications, and processes.  However, it is also crucial to ensure that information risks and security requirements are identified and addressed at all stages of all projects, including new developments and changes to […]

Introduction: In today’s rapidly evolving digital landscape, maintaining information security is of utmost importance for businesses of all sizes.  Cyberattacks and data breaches have become more common and sophisticated, making it essential for organizations to stay up-to-date with emerging threats and security technologies.  One effective way to do this is […]

Introduction: Businesses face various types of risks, including natural disasters, cyber-attacks, and other emergencies.  When such incidents occur, the first line of response is often the contact with regulatory or other authorities and bodies that might need to be contacted in case of queries, incidents, and emergencies.  Therefore, it is […]

Introduction: Information security is a critical aspect of any organization, and maintaining the security of sensitive data and systems is essential to ensure business continuity and protect against potential security breaches.  One of the fundamental principles of information security is segregation of duties, which involves separating critical duties or tasks […]