Every guide on IanJob.com tagged Security Governance. 9 articles.
A practical guide to writing, approving and maintaining information security policies: the policy hierarchy, the core policy set, ownership, review cycles and how to prove people follow them.
A step-by-step ISO/IEC 27001:2022 implementation plan: scope, leadership, risk assessment, Statement of Applicability, Annex A controls, internal audit, management review and the certification audit.
A practical GDPR checklist covering data mapping, lawful basis, records of processing, PII protection, DPIAs, processor contracts, data subject rights, international transfers and 72-hour breach notification.
A step-by-step method for information security risk assessment aligned with ISO 27005 and NIST SP 800-30: assets, threats, likelihood and impact scoring, risk appetite, treatment and the risk register.
Build a security awareness and training program that changes behaviour: role-based content, phishing simulations done fairly, policy acknowledgement, metrics that matter and reporting to leadership.
How to prepare for an ISO 27001, SOC 2 or customer security audit: scope, control mapping, evidence collection, GRC platforms, mock audits, interviews and managing findings.
How to build compliance reporting that executives, boards, risk committees and clients can act on: the metrics to include, a one-page report structure, RAG ratings and decision requests.
A playbook for making every team understand its security obligations and follow through: control ownership, RACI, team scorecards, follow-up cadence, escalation and making compliance part of normal work.
Establish baseline defense with 8 essential small business security policies covering backups, access control, patching, incident response, and AI use.