Clear Path Security
ISMS scope definition for small organisations
ISMS scope definition for small organisations For a small organisation, the scope of your information security management[…]
Implementing Detect and Respond functions in NIST CSF
Implementing Detect and Respond functions in NIST CSF For many UK SMEs, the hardest part of cybersecurity[…]
Automating ISO 27001 evidence collection using GRC tools
Automating ISO 27001 evidence collection using GRC tools For many UK SMEs, the hardest part of running[…]
Responsible AI governance for SMEs: a practical guide for UK businesses
Responsible AI governance for SMEs: a practical guide for UK businesses AI tools can save time, improve[…]
Secure decommissioning and data destruction practices for UK SMEs
Secure decommissioning and data destruction practices for UK SMEs Decommissioning is often treated as an IT tidy-up[…]
Implementing OWASP ASVS controls across application tiers
Implementing OWASP ASVS controls across application tiers OWASP ASVS, the Application Security Verification Standard, is one of[…]
Statement of Applicability walkthrough for first-time implementers
What the Statement of Applicability is and why SMEs need it If you are putting together an[…]
Implementing software supply chain assurance controls for technical teams
Implementing software supply chain assurance controls for technical teams Software supply chain assurance is about proving that[…]
Retaining evidence and logs for investigations: a practical guide for UK SMEs
Retaining evidence and logs for investigations: a practical guide for UK SMEs When something goes wrong, the[…]
Evidence requirements for NHS DSPT submissions: a practical guide for UK SMEs
Evidence requirements for NHS DSPT submissions: a practical guide for UK SMEs If your business handles NHS[…]