ISO 27001 Recertification: What Happens After 3 Years
22 April 2026
By Alan Parker
My guide on what happens around ISO 27001 recertification. Learn the key elements and what to prepare for.
guides
I get a lot of clients that are launching their SaaS products to the market and want to get ISO 27001. So, here I'll answer some common questions.
Learn how to manage ISO 27001 audit findings: how to log, process and resolve nonconformities.
ISMS Document Control: How to Manage It Properly
20 April 2026
By Alan Parker
How to manage your ISMS documentation. Read my guide on how to implement ISO 27001 document control and meet the requirements of the standard.
ISO 27001 is widely misunderstood — too big, too expensive, too IT-focused. We bust 10 of the most persistent myths with facts, figures, and plain English.
ISO 27001 Password Policy: How to Write One
6 April 2026
By Alan Parker
Learn what an ISO 27001 password policy must contain, what auditors look for, and how to write one that works in practice — not just on paper.
ISO 27001 for Law Firms: What You Need to Know
6 April 2026
By Alan Parker
Law firms hold some of the most sensitive data imaginable. This guide explains how ISO 27001 applies to legal practices, what clients expect, and how to get certified.
How to Prepare for an ISO 27001 Stage 2 Audit
5 April 2026
By Alan Parker
How to prepare for an ISO 27001 Stage 2 audit; what evidence auditors examine, and how to make sure your team is ready on the day.
How to Prepare for an ISO 27001 Stage 1 Audit
4 April 2026
By Alan Parker
Learn what happens in an ISO 27001 Stage 1 audit, what the auditor is looking for, and how to be ready on the day so you can move confidently to Stage 2.
ISO 27001 Asset Register: How to Build One
3 April 2026
By Alan Parker
Learn how to build an ISO 27001 asset register that satisfies Control 5.9, keeps auditors happy, and is actually useful for managing your information assets.