Alan Parker

ISO 27001 is widely misunderstood — too big, too expensive, too IT-focused. We bust 10 of the most persistent myths with facts, figures, and plain English.

ISO 27001 and AI: What Organisations Need to Consider

7 April 2026

AI tools like ChatGPT and Microsoft Copilot create new information security risks. Here's how ISO 27001 and AI relate — and what you need to document.

ISO 27001 Password Policy: How to Write One

6 April 2026

Learn what an ISO 27001 password policy must contain, what auditors look for, and how to write one that works in practice — not just on paper.

ISO 27001 for Law Firms: What You Need to Know

6 April 2026

Law firms hold some of the most sensitive data imaginable. This guide explains how ISO 27001 applies to legal practices, what clients expect, and how to get certified.

How to Prepare for an ISO 27001 Stage 2 Audit

5 April 2026

How to prepare for an ISO 27001 Stage 2 audit; what evidence auditors examine, and how to make sure your team is ready on the day.

ISO 27001 vs PCI DSS: Which Do You Need?

4 April 2026

ISO 27001 vs PCI DSS — both relate to information security but they serve very different purposes. This guide helps you work out which one you need.

ISO 27001 Management Review: A Complete Guide

4 April 2026

Learn what an ISO 27001 management review is, who must attend, what it needs to cover, and how to run one that satisfies auditors.

How to Prepare for an ISO 27001 Stage 1 Audit

4 April 2026

Learn what happens in an ISO 27001 Stage 1 audit, what the auditor is looking for, and how to be ready on the day so you can move confidently to Stage 2.

How to Complete an ISO 27001 Risk Assessment

3 April 2026

A practical, step-by-step guide to conducting an ISO 27001 risk assessment — covering methodology, scoring, and documentation that satisfies auditors.