Articles
My articles across various subject – all for you to review.
-
How to Complete an ISO 27001 Risk Assessment
A practical, step-by-step guide to conducting an ISO 27001 risk assessment — covering methodology, scoring, and documentation that satisfies auditors.
The risk assessment is the engine of your ISMS (Information Security Management System). It is the very heart of ISO 27001. Everything else (your controls, your Statement of Applicability, your risk treatment plan) flows from it. Get it right, and the rest of the implementation becomes much clearer. Get it wrong, and you’ll find yourself … Read more
-
ISO 27001 Asset Register: How to Build One
Learn how to build an ISO 27001 asset register that satisfies Control 5.9, keeps auditors happy, and is actually useful for managing your information assets.
The asset register is one of those ISO 27001 requirements that sounds straightforward but often catches organisations out in the audit. Either it’s too high-level to be useful, or it’s so granular that it becomes impossible to maintain. Virtually everyone assumes it’s just about tracking laptops, desktops, phones, etc. It’s more than that. It includes … Read more
-
ISO 27001 for Small Businesses: A Practical Guide
This guide explains how ISO 27001 for small businesses can make sense and how to implement and certify without a big budget or a dedicated compliance team.
ISO 27001 has a reputation for being complicated, expensive, and built for large organisations. That reputation isn’t entirely fair — but it has kept many small businesses from pursuing certifications they genuinely need. This ISO 27001 for small businesses guide cuts through the noise of larger enterprises and explains what ISO 27001 actually looks like … Read more
-
How Long Does ISO 27001 Take?
How long does ISO 27001 take? I explore a realistic timeline for ISO 27001 from kick-off to certified and what speeds the process up and what slows it down.
“How long does ISO 27001 take and how much” is often the first email I get from someone enquiring about ISO 27001. I can understand that, but asking how long ISO 27001 takes is a bit like asking how long it takes to refit a bathroom. The answer will depend on all sorts of things. … Read more
-
What Happens If You Fail an ISO 27001 Stage 2 Audit?
Failing an ISO 27001 Stage 2 audit doesn’t mean the end of your certification journey. Here’s what actually happens — and how to avoid being in that position.
The short answer is: it’s not the end-of-the-world event you probably fear. But it might be annoying, potentially expensive, time-consuming, and entirely avoidable with the right preparation. Here’s what actually happens when a Stage 2 audit doesn’t go to plan — and what I’ve seen first-hand when an organisation pushes into audit before they’re ready. … Read more
-
The ICO Fined Capita £14 Million. Here’s What It Means for Smaller Businesses.
In October 2025, Capita received the ICO’s largest ever fine — and ISO 27001 was specifically mentioned in the findings. Here’s what UK SMEs should take from it
In October 2025, outsourcing giant Capita received the largest fine in the Information Commissioner’s Office (ICO) history — £14 million — following a ransomware attack in 2023 that exposed the personal data of 6.6 million people. It’s easy to read a headline like that and assume it has nothing to do with your business. My … Read more
-
Stuck at 60%: Why Your ISO 27001 Project Stalled – And How to Get Moving Again
ISO 27001 projects often stall at around 60%, after the policies are written but before the ISMS is running. Why it happens and how to get moving again.
ISO 27001 projects often stall at around 60%, after the policies are written but before the ISMS is running. Why it happens and how to get moving again.
-
Mastering ITIL Practices: A Comprehensive Guide to Streamlining IT Services
Learn about mastering itil practices in the context of ITIL 4, with clear explanations, everyday examples and tips you can use with a real IT team.
Streamlining IT services requires a solid grasp of ITIL practices within the IT Service Management framework. Struggling with service disruptions, slow response times, and user dissatisfaction? You’re not alone. The inability to efficiently manage IT services can spell disaster for your career and your organisation. The key to overcoming these challenges lies in mastering ITIL … Read more
-
Exploring ITIL Best Practices
Learn about exploring itil best practices in the context of ITIL 4, with clear explanations, everyday examples and tips you can use with a real IT team.
Introduction to ITIL Best Practices Establishing ITIL best practices is crucial within IT service management to achieve operational excellence and deliver outstanding value to customers and stakeholders. ITIL, or the Information Technology Infrastructure Library, has long been revered for its comprehensive framework that guides organisations in efficiently managing and delivering IT services. The latest evolution, … Read more
-
ITSM vs ITIL: Understanding the Difference
Learn about itsm vs itil in the context of ITIL 4, with clear explanations, everyday examples and tips you can use with a real IT team.
ITSM vs ITIL Common Questions What is IT Service Management (ITSM)? IT Service Management, or ITSM, is identified as a comprehensive strategic initiative aimed at the effective design, delivery, management, and enhancement of IT services within an organisation. This initiative is structured to align IT services with overarching business objectives, ensuring suitable processes, … Read more