Information Security – CFE Certification

What is DOS7?

The UK government has launched a new digital procurement framework called Digital Outcomes and Specialists 7 (DOS7), officially known as RM1043.9. This agreement helps public sector organisations find digital experts or teams to support their transformation projects. It replaces previous

Roadmap for Leaders: The NIS2 Directive

The European Union's NIS2 Directive, which came into effect in 2025, has become one of the most comprehensive regulations redefining corporate responsibility in digital security. Covering more than 160,000 organisations and their digital supply chains, this regulation now requires active

PCI DSS and ISO 27001 for FinTechs

Similarities Between TISAX and ISO 27001

Information security isn't just a technical requirement; it's a cornerstone of corporate sustainability. Especially in fields with high competition and complex supply chains, like the automotive sector, information security standards are critically important for both legal compliance and building trust

Risk-Driven Future Design

The rapid evolution of artificial intelligence systems is fundamentally transforming data-driven decision-making in the business world. In an environment increasingly shaped by algorithms, operating within a secure and ethically grounded framework is no longer optional—it is a core requirement for

Sustainable Operational Resilience

The digital backbone of the financial sector is so critical that even minor disruptions can lead to major breakdowns. The European Union’s Digital Operational Resilience Act (DORA) imposes comprehensive responsibilities on financial institutions to manage this fragility. It mandates the

ISO/IEC TS 17012 Guidelines For Remote Audit Conducting

ISO/IEC TS 17012:2024 is a technical specification developed by the International Organisation for Standardisation (ISO) and the International Electrotechnical Commission (IEC). It offers guidance on employing risk-based approaches for evaluating and managing audit processes within organisations, particularly emphasising conformity assessment

Upcoming: ISO/IEC 27701:2025 Where Personal Data Meets Privacy

Protecting personal data is no longer just a legal requirement, but a strategic responsibility for organisations. ISO/IEC 27701 provides a Privacy Information Management System (PIMS), integrated with ISO/IEC 27001, to address this need. Originally published in 2019 as ISO/IEC 27701:2019,

NIS2: The EU’s Cyber Shield

The NIS2 Directive (Network and Information Systems Directive 2) is the European Union’s latest cybersecurity regulation, covering medium and large organizations operating in key sectors across EU member states. Its primary goal is to enhance cybersecurity levels within these organizations,

ISO/IEC 27036 Cybersecurity Standard Series

The ISO/IEC 27036 standard series is a multi-part standard that guides organisations on securing information and information systems within supplier relationships. This series offers guidelines for managing information security risks in supplier relationships. ISO/IEC 27036 can be used with several ISO

1 2 3 … 5

Category: Information Security