Resilience is …

… depending on others and being there for them when they need us most … the rod bending alarmingly … while landing a whopper … an oak tree growing roots against the prevailing wind … taking the punches, reeling but not out for the count….

July 24, 2022
Read More >>

Risk management trumps checklist security

While arguably better than
nothing at all, an unstructured approach to the management of information security results in organisations adopting a jumble, a
mixed bag of controls with no clear focus or priorities and – often –
glaring holes in the ar…

July 24, 2022
Read More >>

Security in software development

Prompted by some valuable customer feedback earlier this week, I’ve been thinking about how best to update the SecAware policy template on software/systems development. The customer is apparently seeking guidance on integrating infosec into the develop…

July 22, 2022
Read More >>

ISO management systems assurance

In the context of the ISO management systems standards, the internal audit process and accredited
certification systems as a whole, are assurance controls primarily intended to confirm that organisations’ management systems conform to the explicit requ…

July 21, 2022
Read More >>