Governance

A clear explainer of an ISMS: what an Information Security Management System is, how ISO/IEC 27001 defines it, the Plan-Do-Check-Act cycle that keeps it running, the core artefacts (scope, risk assessment, risk treatment and the Statement of Applicability), and the benefits of managing security as a system rather than a pile of controls.

Microsoft Teams, Zoom and Google Meet all carry similar security responsibilities. How to compare and harden collaboration tools across access, data protection, third-party apps and admin controls.

What security review does a third-party Microsoft Teams app need before you grant it access? The four checks to run — permissions vs. need, publisher verification, data flow, and governance fit — before an over-permissioned Teams app reaches your messages and files.

CISA’s Zero Trust Maturity Model maps the journey across five pillars and four stages. What each pillar and stage means, and how to assess where you sit.

NIST CSF 2.0 defines four maturity tiers — Partial, Risk-Informed, Repeatable, Adaptive. What each tier means and how to run a maturity assessment.

How AI supercharges surveillance and profiling, the privacy and security risks it creates, and the governance safeguards a CISO or DPO can put in place.