CyphrQISO 22301 Business Continuity Explained: BIA, Recovery, Certification
ISO 22301 explained: what the business continuity standard covers, how a BIA and recovery objectives work, and how certification goes.
ISO Standards
The ISO standards behind security, privacy, continuity and IT service audits: what each covers and who uses it.
9 articles
ISO/IEC 27701 Explained: Privacy Management, GDPR and 2025 Edition
ISO/IEC 27701 explained: the privacy management standard for controllers and processors, how it relates to GDPR, and what the 2025 edition changed.
ISO/IEC 27001 Explained: What It Requires and How Audits Work
ISO/IEC 27001 explained: what the ISMS standard requires, how certification and surveillance audits work, and what changed in 2022.
ISO 31000 Risk Management Explained: Principles and Process
ISO 31000:2018 is risk management guidance, not a certificate. What its principles, framework and process cover, and how it sits above ISO/IEC 27005.
ISO/IEC 20000-1 Explained: IT Service Management, ITIL and Certification
ISO/IEC 20000-1 is the certifiable standard for IT service management. What it requires, how it differs from ITIL, and how certification works.
ISO/IEC 27035 Explained: Incident Management, NIST and Deadlines
ISO/IEC 27035 is guidance for handling security incidents. Its parts, lifecycle, how it compares with NIST SP 800-61, and reporting clocks.
ISO 27017 vs 27018: Cloud Security and Privacy Standards Explained
ISO/IEC 27017 covers cloud security controls; ISO/IEC 27018 covers personal data in public clouds. What each adds and what to ask providers.
ISO/IEC 27002:2022 Explained: The Security Controls Guide
ISO/IEC 27002:2022 is guidance on security controls, not a certificate. How it relates to 27001 Annex A, its themes and attributes, and how to use it.
ISO/IEC 27005 Risk Management Explained: Process and Approaches
ISO/IEC 27005:2022 is guidance, not a certificate. What its risk process covers, event-based vs asset-based approaches, and how it supports ISO 27001.