ISO 27001 nonconformities: major vs minor, with worked examples
Whether a finding is major or minor decides whether you get certified on schedule. The difference is about the management system, not the size of the mistake.
ISO 27001
Implementing, auditing and maintaining ISO/IEC 27001:2022, plus the ISO 27017 and 27018 cloud extensions.
Implementing it? See ISO 27001 on QULDEX.
Evidence management
An audit evidence naming convention that survives three audits
Evidence that cannot be found, dated or traced to a control gets requested again. A five-part file name fixes most of that before any tool is involved.
ISO 27001
ISO 27001:2022 transition: what changed and what auditors now check
The 2022 revision regrouped Annex A into four themes and added 11 controls. Here is what that means for your Statement of Applicability and your next surveillance audit.