Guides

Practical guides to the standards we build toolkits for, written by auditors. Learn what each standard requires and how to get certified.

Information Security

18 guides

ISO/IEC 27701:2025 and ISO/IEC 42001 for AI privacy: who covers what

Information Security7 min

ISO/IEC 5259 data quality, bias and robustness standards: 2026 table

Information Security7 min

AI red teaming and security testing: what is actually required in 2026

Information Security7 min

Agentic AI governance framework 2026: rules, controls, records

Information Security8 min

HIPAA Privacy, Security and Breach Notification Rules: what is final, proposed or vacated in 2026

Information Security7 min

CMMC Level 2 and NIST SP 800-171 after the Phase 2 suspension

Information Security7 min

Does DORA apply to non-EU ICT providers? Decision table and clauses

Information Security7 min

NIS 2 and ISO/IEC 27001:2022 mapping: ENISA's table and the gaps

Information Security7 min

Does NIS 2 apply to companies outside the EU? 2026 decision table

Information Security7 min

UAE e-invoicing deadlines: who goes live when, and what MD 64/2025 requires of ASPs

Information Security7 min

ISO/IEC 27701:2025: what changed now that the privacy standard stands alone?

Information Security6 min

ISO/IEC 19770-1:2017 + Amd 1:2024: what does an IT asset management system require?

Information Security6 min

ISO/IEC 27017: A Practical Guide to Cloud Security Controls

Information Security5 min

ISO/IEC 42001:2023: what an AI management system requires and how it relates to the EU AI Act

Information Security6 min

ISO/IEC 38507:2022: what boards should do to govern the use of AI

Information Security7 min