Compliance
ISO 27001 threat intelligence control 5.7 for small teams
Control 5.7 asks you to gather and use threat information. A small team can meet it with existing logs and an incident procedure. Here is how.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
After the ISO 27001 certificate: surveillance and recertification
What happens once you hold an ISO 27001 certificate: yearly surveillance visits, the three year cycle, full reassessment, and how to keep the ISMS alive.
Oct 18, 20263 min read
Compliance
ISO 27001 surveillance audits: what happens after you certify
Getting the ISO 27001 certificate is not the end. Here is what surveillance audits and recertification generally involve and how to stay ready all year.
Oct 18, 20263 min read
Compliance
ISO 27001 supplier relationships control 5.19 in practice
Control 5.19 asks you to manage risks from suppliers' products and services. A practical process, evidence list and the mistakes auditors flag.
Oct 18, 20263 min read
Compliance
How to write an ISO 27001 Statement of Applicability
A Statement of Applicability lists which Annex A controls you use, why, their status, and why any are excluded. Here is how to build one auditors accept.
Oct 18, 20264 min read
Compliance
ISO 27001 Stage 1 vs Stage 2 audit: what happens in each
What the ISO 27001 Stage 1 and Stage 2 certification audits check, how they differ, and what to have ready before the auditor arrives for each one.
Oct 18, 20264 min read
Compliance
Setting measurable ISO 27001 security objectives
ISO 27001 clause 6.2 wants measurable security objectives. How to set top level and operational ones, what auditors check, and what you do not need.
Oct 18, 20263 min read
Compliance
ISO 27001 mandatory documents and records, in one list
The documents and records ISO 27001:2022 requires, by clause, plus which Annex A items are only mandatory when your risks call for those controls.
Oct 18, 20263 min read
Compliance
ISO 27001 management review minutes: what to record
How to run and document the ISO 27001 management review so the minutes show real decisions, and why auditors ask to see them in every certification audit.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.