The current cost to small businesses to achieve security certifications is significantly above their budget and their expectations. Recognizing the need for a more accessible standard, Assuredly has embraced SMB 1001, a new security standard/framework devised by experts at CSC AU. Unlike its predecessors, SMB 1001 offers a pragmatic and tiered approach to security controls, enabling small businesses to achieve Tier 1 compliance swiftly and enhance their security measures over time.

The ACSC released a new version of the Essential Eight in July 2021. Contrary to its title the Essential Eight has more than eight controls defined within its framework. Read this article for as summary of what the Essential Eight is and keys changes made in 2021

Nine years after it’s last publication, in 2013, ISO 27001 has been updated. InfoSecAssure has completed an in-depth and loving review of the changes made to ISO 27001 in 2022

After eight years, ISO 27002 has been updated. ISO 27001 is expected to be updated late in 2022.

Read this article to understand more about how the scope of a ISO 27001 Certification Audit is defined and what types of evidence your auditor will be looking for when they conduct the audit.

Audit reports and certifications can be a useful investment in your overall security governance strategy to enable your company to: maintain adequate security controls for your company and clients; provide appropriate levels of assurance to clients that you are governing security in line with their expectations; or deliver to specific contractual certification/audit requirements in agreed contracts with clients.

Does APRA CPS 234 go far enough to bolster the information security practices of some Australian organisations or have these Australian Banking Sector Regulators gone too far?