Perspective on governance, risk and compliance.

10 resources

• Article

  Where to start a cybersecurity governance program

  The three questions that order the work before choosing controls or tools.

  Read →
• Guide

  Preparing for an ISO/IEC 27001:2022 audit

  What the auditor looks at and how to arrive with evidence ready, without last-minute scrambling.

• Case

  Path to ISMS certification (illustrative case)

  An illustrative journey of an ISMS, from assessment to the certification audit.

• Article

  Measuring maturity: from controls to decisions

  How to move from a list of controls to indicators that inform leadership.

• Article

  Risk vs. compliance: why they’re not the same

  Complying isn’t the same as reducing risk; how they complement each other in a good program.

• Guide

  Business continuity checklist with ISO 22301

  The points that can’t be missing from a continuity plan that lasts.

• Article

  How to report cybersecurity to a board

  How to bring security into leadership’s language: risk, value and decisions.

• Article

  Applied risk management: from paper to operation

  From a risk register in a spreadsheet to operational, traceable decisions.

• Article

  SOC 2 and ISO/IEC 27001: when each one fits

  When each framework fits based on context, customers and objectives.

• Download

  CGF methodology brief

  The CGF · Cyber Governance Framework (by i-Prot) cycle: its stages and its relationship with standards.

  Read →