Posts

Showing posts from September, 2026

Enterprise GRC in Cyber Security: A Practitioner’s Control Testing Blueprint

Image
Disclosure: This post contains affiliate links. If you click through and make a purchase, I may receive a small commission at no extra cost to you. As an Amazon Associate, I earn from qualifying purchases. Hi Infosec Professionals, Security Leads , Risk Managers & GRC Pros! Welcome back to the blog. Have you ever found yourself in a situation where you have spent weeks preparing for an Information Security audit , only to find that you have hundreds of files that do not provide any proof your systems are secure? You are not alone! We are going to take you through everything you need to know about building a continuous assurance process that will impress even the toughest regulators , reduce audit fatigue and importantly keep your operations secure. Introduction Within modern governance , organisations can fall into a trap every quarter. They can become confused between having a policy in place and understanding that it is working. This is a primary failure point within c...

How to Pass Your ISO 27001 Audit: Why System Screenshots Mislead Auditors

Image
Disclosure: This post contains affiliate links. If you click through and make a purchase, I may receive a small commission at no extra cost to you. As an Amazon Associate, I earn from qualifying purchases.   Hi readers! Welcome back to my blog. If you are preparing for your first ISO 27001 audit , or already deployed in  cyber security risk management across  Enterprise GRC , then you are at right place. In today's blog, I will discuss an issue within GRC today, which is using screenshots to prove that information systems are secure . If you are an aspiring auditor, or someone want to make entry into Information Security / GRC Auditing , mastering basic concepts will help you stand out from the crowd. I actually talk about my newly launched book " Crack Your First InfoSec Interview " . This book is published and available to buy as Kindle edition from Amazon , or digitally from my Blogger E-Books page . It can also be found on my Peerseek Profile . Introduction ...