What does the EU GDPR mean for IT departments?
Last month, the EU General Data Protection Regulation (GDPR) was approved, entering a two-year transition period during which member states and organisations handling European residents’ personal data...
View ArticleISO 27001 documentation: an overview
Implementing and maintaining an ISMS (information security management system) aligned to ISO 27001 requires up-to-date, accurate and compliant documentation. This is often where businesses experience...
View Article7 top tips for effective ISO 27001 documentation
If you’re responsible for creating documentation for your ISMS (information security management system), then you need to be aware of these 7 tips for creating effective, successful documentation....
View ArticleThe key to ISO 27001 certification: policies and procedures
While implementing an ISO 27001-compliant ISMS (information security management system) in your organisation may seem overwhelming, you can prepare yourself for creating and managing the documentation...
View Article4 levels of ISO 27001 documentation
ISO 27001 clearly recognises that there is no such thing as a one size fits all approach to documentation. Instead, it recommends that the extent of the ISMS documentation should reflect the complexity...
View ArticleImplement ISO 27001 using a DIY approach and external know-how
If you work for a small or medium-sized company and you’re considering implementing ISO 27001, you’re probably already overwhelmed with various approaches on how to start and finish such a project...
View ArticleHow to document your information security policy
With cyber security affecting businesses worldwide, it is important that all organisations have a policy in place to state and record their commitment to protecting the information that they handle. We...
View ArticleTackling ISO 27001 documentation: what approach is right for your organisation?
Implementing and maintaining an ISMS (information security management system) aligned to ISO 27001 requires up-to-date, accurate and compliant documentation. There are three approaches to tackling the...
View ArticleThe critical GDPR documents your organisation will need to ensure compliance
Every organisation that processes personally identifiable information of EU residents will be required to comply with the GDPR by 25 May 2018. In order to comply with the GDPR, you will need to do a...
View ArticleOver-complex IT security costs UK businesses 127 days each year
According to latest figures from IS Decisions, large organisations with 250+ employees can lose 2.7 days a week or 127 days a year because of complex IT security procedures. For small organisations (30...
View ArticleISO 14001 documentation: what you need to know
ISO 14001, the international standard for environmental management, does not require many formal procedures – it is more about the results of environmental processes. However, past experience has...
View ArticleThe biggest myth behind ISO 9001
Many people’s perception of ISO 9001, the international standard for best-practice quality management, is that it is all about documentation. There are indeed a number of documents mandated by the...
View ArticleImportant documentation required by the GDPR
In order to comply with the EU General Data Protection Regulation (GDPR), you must produce and maintain a wide range of documentation. This will not only help you meet the explicit and implicit...
View ArticleIG Toolkit: Supplying products or services to the NHS
Any organisation that wants to supply products or services to the NHS must meet the requirements set out in the NHS Information Governance (IG) Toolkit. The IG Toolkit is an online system which allows...
View ArticleFree toolkit trials: Accelerate your compliance projects
Creating documentation for your management system or compliance project is never easy – and can often run to hundreds of pages. But thanks to our documentation toolkits, you can get fully customisable...
View ArticleISO 27001 documents: Overcoming your writer’s block
Implementing an Information Security Management System (ISMS) aligned to the internationally-recognised standard ISO 27001 requires you to document the ISMS. This documentation process represents a...
View Article3 of the largest penalties issued by the ICO in the last year
Organisations within the UK are required to comply with the DPA (Data Protection Act) or face fines from the ICO (Information Commissioner’s Office). To date, the ICO has issued penalties to...
View ArticleOvercoming the top challenges of implementing ISO 27001
According to the ISO 27001 Global Report 2016, which comments on the implementation challenges, benefits and experiences of 250 ISO 27001 implementers globally, found that many organisations struggle...
View ArticleISO 27001 templates: How to create your own documentation
When implementing an ISO 27001-compliant information security management system (ISMS), you will need to create and manage the ISMS documentation. ISO 27001: What needs to be documented The Standard...
View ArticleICO reports 22% increase in data security incidents
The Information Commissioner’s Office (ICO) has reported a 22% increase in the number of cases received in the first quarter of this year (April – June 2016) compared to the previous quarter. Health...
View Article