Cyber security compliance, explained
Plain English guides related to IRAP, Essential Eight, ISO 27001 and 42001, SOC 2 and vCISO.
Browse by framework
Start here: the six framework guides
The pillar guide for each framework, the best place to begin.
Latest Guides
-
ISO 27001 Annex A Controls Explained
The 93 Annex A controls in ISO 27001:2022, grouped into four themes, what changed in 2022, and why you select from them…
-
The ISO 27001 Statement of Applicability Explained
The Statement of Applicability is the ISO 27001 document that maps every Annex A control to your risk treatment, with a reason…
-
ISO 27001 Stage 1 vs Stage 2 Audit Explained
ISO 27001 certification is a two stage audit. Stage 1 reviews your ISMS documentation and readiness; Stage 2 tests whether it actually…
-
What Is ISO 27001:2022? A Plain Guide for Australian Organisations
ISO 27001:2022 is the international standard for an information security management system. What it certifies, what Annex A requires, and whether you…
-
ISO 27001 Certification Cost in Australia: What Drives the Price
ISO 27001 certification has no list price. What drives the cost, why audit fees scale with the number of people in scope,…
-
How Long Does ISO 27001 Certification Take in Australia?
How long ISO 27001 certification takes in Australia, the stages and what they involve, why the management system must run before the…
-
ISO 27001 Readiness Checklist for Australian Organisations
What to have in place before a certification body arrives: the clauses 4 to 10 management system, the Statement of Applicability, the…
-
Essential Eight Compliance Checklist
What to verify for each of the eight mitigation strategies, which maturity level you need to reach, and how Essential Eight compliance…
-
Essential Eight vs ISO 27001: Which Does Your Organisation Need?
The Essential Eight and ISO 27001 solve different problems. Which your organisation needs depends on whether you sell to government or commercial…
-
ISO 27001: The Complete Australian Guide
ISO 27001:2022 is the international standard for an information security management system. What it requires, what certification costs and takes, and how…
-
How Long Does an Essential Eight Assessment Take?
How long an Essential Eight assessment takes in Australia, the two phases involved, and what makes it faster or slower.
-
Essential Eight vs the ISM: How They Fit Together
The Essential Eight is a subset of the ISM, not an alternative to it. What each covers, which applies to you, and…