Blog

Internal Audit Process

Internal Audit Process. GRC guide for security and GRC teams: controls, evidence, audit readiness, and continuous compliance with SecureSlate.

Is SOC 2 a certification or attestation? Why the distinction matters for buyers

SOC 2 is an attestation report from a CPA firm—not a certificate like ISO 27001. Learn the difference, what you receive after audit, and how to describe it accurately.

ISO 27001 audits: What internal and external audits to prepare for (Stage 1, Stage 2, surveillance)

ISO 27001 involves internal audits plus external Stage 1, Stage 2, and surveillance audits. Learn what each audit covers, who runs it, and how to prepare evidence.

ISO 27001 Business Continuity

ISO 27001 Business Continuity. ISO 27001 guide for security and GRC teams: controls, evidence, audit readiness, and continuous compliance with SecureSlate.

ISO 27001 Requirements

ISO 27001 Requirements. ISO 27001 guide for security and GRC teams: controls, evidence, audit readiness, and continuous compliance with SecureSlate.

ISO 27001 third-party risk management requirements

ISO 27001 supplier and third-party requirements—Annex A themes, ISMS processes, and evidence for certification audits.

ISO 27001 vs. ISO 27701: What's the difference? (security ISMS vs privacy PIMS)

ISO 27001 certifies your information security management system. ISO 27701 extends it for privacy (PIMS). Compare scope, controls, buyers, and when you need one or both.

ISO 42001:2023 controls: All you need to know (Annex A and Statement of Applicability)

ISO/IEC 42001:2023 Annex A lists AI governance controls for your AIMS. Learn control themes, how to select applicability, and evidence auditors expect.

ISO 42001 audits: Your 101 preparation guide (Stage 1, Stage 2, and evidence)

Prepare for ISO 42001 certification audits with this 101 guide—what auditors test, which AIMS records to prepare, and how Stage 1 differs from Stage 2.

ISO 42001 Vs ISO

ISO 42001 Vs ISO. ISO 27001 guide for security and GRC teams: controls, evidence, audit readiness, and continuous compliance with SecureSlate.