Clear Path Security
SLSA levels explained and how to reach level 3 with GitHub
Software supply chain security has moved from a specialist concern to a practical delivery issue for many[…]
ISO 27001 gap analysis: how to run one and a free checklist
Key takeaways A gap analysis shows where your current security arrangements are in place, partial, or missing,[…]
ISO 27001:2022 transition checklist for organisations still on 2013
Key takeaways Treat the ISO 27001:2022 transition as an update to your existing system, not a full[…]
ISO 27001 for SaaS start-ups: scope, evidence and timelines
Key takeaways Keep the scope narrow and tied to the real SaaS service, not every possible system[…]
NIS2 obligations explained for UK-based organisations
If your business sells into the EU, supports EU customers, or sits somewhere in a wider supply[…]
How much does a cyber security assessment cost in the UK?
Key takeaways The cost of a cyber security assessment in the UK depends mainly on scope, complexity,[…]
ISO 42001 explained for organisations already holding ISO 27001
Key takeaways ISO 42001 is about governing AI risk and use, while ISO 27001 remains the foundation[…]
NHS DSPT explained for suppliers
If your business supplies goods or services to the NHS, the NHS Data Security and Protection Toolkit,[…]
Microsoft Secure Development Lifecycle explained for UK SMEs
If your business builds software, commissions it, or relies on a digital product to serve customers, security[…]
Secure software procurement requirements for suppliers
For many UK SMEs, software buying decisions are now security decisions. A poor choice can lead to[…]