In 2022 the international standard for information security management system (ISMS) was updated and published, requiring any organisation certified to ISO 27001:2013 to migrate to ISO 27001:2022 by October 2025 in order to remain compliant. However shortly after, a 2023…
The new control id 5.7 Threat intelligence has been added to ISO/IEC 27002:2022 to provide awareness of the organisations threat environment so that the appropriate mitigation actions can be taken. The control is regarding information relating to information security threats…
In today’s digital age, ensuring the security and protection of sensitive information is crucial for businesses. One effective way to achieve this is by obtaining ISO 27001 certification, a globally recognised standard for an information security management system (ISMS). This…
Cyber security can be a daunting term especially for those without a tech background, but there’s no doubting the importance of protecting your IT Systems in order keep the information you are responsible for safe. Here are 5 simple cyber…
In February 2022 a revised version of ISO 27002:2022 “Information security, cybersecurity and privacy protection — Information security controls” was published with some significant changes. This is relevant because Annex A of the ISO 27001 standard is based on this…
ISO 27002:2022 introduces several new information security controls including A5.23 – Information security for use of cloud services. This blog takes a brief look at what is required. Information security for use of cloud services in ISO 27002:2022 The new…
When people first enquire about ISO 27001, the information security management system, they often have lots of questions about the impact it may have on their organisation, both positive and negative. One question that regularly comes up is: Do I…
Risk management consultancy Assent is pleased to announce it has been awarded Cyber Essentials Certification for a third consecutive year. As an Information Security and Cyber Security consultancy, we understand too well the importance of ensuring organisations implement robust technological…
Cybercriminals are well versed in finding prime targets to execute their attacks – and small businesses are considered ripe for the picking. Many SMEs consider themselves to be safe since they employ a ‘security-by-obscurity’ policy – they feel like since…
