Advanced Audit Scenarios: Detecting Paper ISMS and Audit Theater

Annex A Deep Dive: Organizational Controls

Annex A Deep Dive: People & HR Security Controls

Annex A Deep Dive: Physical & Environmental Security

Annex A Deep Dive: Technological Security Controls

Annex A Overview: The Control Catalog and How to Use It

Annex B & C: Mapping Controls and Transitioning from 2013 to 2022

Context & Scope: Defining What Your ISMS Covers

Continual Improvement & Certification Lifecycle

Corrective Action: Handling Nonconformities the Right Way

Internal Auditor: Plan, Execute and Report ISO 27001 Audits

ISO 27001 & DORA: ICT Risk, Resilience Testing and Third-Party Oversight

ISO 27001 & GDPR: Article 32 Security of Processing

ISO 27001 & NIS2: Governance, Supply Chain and Incident Reporting

ISO 27001 Foundations: How the Standard Works

Leadership & Policy: Making Security a Management Duty

Operations: Making the ISMS Work Day-to-Day

Performance Evaluation: Metrics, Internal Audit & Management Review

Risk Assessment: Methodology That Survives Audit Scrutiny

Risk Treatment & SoA: Turning Risk into Controls