Blog / iso 27001

The ultimate guide to ISO 27701: privacy extension to ISO 27001 (PIMS explained)

ISO/IEC 27701 extends ISO 27001 with privacy controls (PIMS). Learn what 27701 covers, how it relates to GDPR, and when to add it to your ISMS.

What is an information security management system (ISMS)? A practical explainer

An ISMS is the foundation of ISO 27001 certification. Learn what it includes, how clauses 4–10 work with Annex A controls, and how to build one that scales.

Your guide to the ISO 27001 Annex A controls (2022): themes, SoA, and evidence

ISO 27001 Annex A lists 93 controls in four themes. Learn how to select controls, document your Statement of Applicability, and collect audit-ready evidence.

ISO 27001 annual obligations: the complete checklist for surveillance audit readiness

ISO 27001 annual obligations: the complete checklist for surveillance audit readiness — ISO 27001 Annual Obligations Checklist For Surveillance Audits. ISO 27001…

The best ISO 27001 compliance software for 2026

Compare top ISO 27001 compliance software for 2026: SoA support, automated evidence, continuous monitoring, multi-framework reuse, and audit-ready workflows.

How CrowdComms and Henchman use ISO 27001 and SOC 2 together

Learn how CrowdComms and Henchman approached ISO 27001 and SOC 2 together, why they sequenced them the way they did, and how to reuse controls and evidence.

GDPR vs ISO 27001: how they align, how they differ, and why you need both

GDPR and ISO 27001 overlap, but they’re not interchangeable. Learn how they align, where they differ (privacy rights vs security controls), and how to run a…

How GDPR, ISO 27001, and SOC 2 can level up your selling game

Learn how GDPR, ISO 27001, and SOC 2 help you close deals faster by reducing buyer risk, expanding market access (EU + North America), and speeding up security reviews.

How much does ISO 27001 certification cost? (2026 budgeting guide)

Learn how much ISO 27001 certification costs in 2026, including preparation, implementation, Stage 1 and 2 audits, surveillance audits, and recertification.

How SaaS companies can achieve ISO 27001 certification

Learn how SaaS companies can achieve ISO 27001 certification with an 8-step checklist covering scoping, risk assessment, ISMS evidence, audits, and ongoing maintenance.