From a Leaked API Key to a Notifiable Privacy Breach: ISO 27001 Controls That Break the ChainFour steps from a committed secret to a breach decision, and the ISO/IEC 27001:2022 controls at each one.4 min read·sis-cert.hashnode.dev5h ago
CERT-In’s 6-Hour Rule and ISO 27001: Logging and Incident Controls Engineers Can BuildThe 2022 CERT-In directions set two clocks for Indian organisations: six hours to report, 180 days of logs. Here’s where ISO/IEC 27001:2022 controls help.4 min read·sis-cert.hashnode.devNov 4
SOC 2 Type 2 Evidence From Your Pipeline: What Engineers Actually Need to CollectAccess reviews, change approvals, monitoring and incident records already exist in your tools. Here’s where to find them, and what they can’t prove alone.3 min read·sis-cert.hashnode.devNov 3
ISO 27001 or SOC 2 First? A Decision Guide for Ethiopian Software and Outsourcing TeamsDifferent buyers ask for different credentials. Here’s what each one is, who asks for it, and how to choose the first one.3 min read·sis-cert.hashnode.devNov 2
Essential Eight Meets ISO 27001: An Indicative Control Map for Australian SaaS TeamsThe ASD’s Essential Eight and ISO/IEC 27001:2022 Annex A overlap more than most teams expect. Here’s a map, and where it stops.3 min read·sis-cert.hashnode.devOct 30