Articles

What is the Internal Audit Report?

Balanced Scorecard: what it is and what it can do for you

What the Balanced Scorecard is, its four perspectives, how to build a strategy map with an example, and how to choose t…

What is the SOX Act and What is it For?

GDPR and conservation periods of personal data

Risk assessment methods: MEHARI, EBIOS and OCTAVE

A comparison of three well-known information security risk assessment methods, MEHARI, EBIOS and OCTAVE: who created th…

What are the Advantages Offered by the ISO 37001 Standard?

ISO 14001: Keys and Principles of the Standard

How to implement an IT risk framework

Security Audits

Automation of the model of the 3 lines of defense

ISO 22316. Organizational resilience

keys to implementing a BCP and DRP (Business Continuity Plan – Disaster Recovery Plan)

10 Tips for establishing policies for Internet use

What is the Statement of Applicability (SoA) and what is it for?

What the ISO 27001 Statement of Applicability is, what clause 6.1.3 requires, an example SoA with Annex A controls from…

What is a BIA and why does it matter for business continuity?

What a Business Impact Analysis (BIA) is, how it is carried out, an example of BIA results, the RTO, RPO and MTPD it pr…

What is the COSO model and how does it help manage risk?

What the COSO model is, how it has evolved, the components and principles of COSO 2013 internal control and COSO ERM 20…

The figure of the Data Controller and Data Processor in the GDPR

What is it and how to develop a Record of Processing Activities, risk analysis and impact assessment?

What is and how to develop a compliance risk assessment?

Risk appetite: what it is, how to define it and examples

What risk appetite is, how it differs from risk tolerance and risk capacity, how to write a risk appetite statement and…