Topic: iso-27001

2 posts on iso-27001.

22 June 202612 min read

Working through DORA Article 28: third-party obligations, the contract checklist, and what the auditor asks for

DORA Article 28 sets the third-party obligations; the contract clauses live in Article 30. Each subsection mapped to ISO 27001 and SCF controls.

dora third-party-risk iso-27001 compliance mcp

18 June 202611 min read

NIS2 vs ISO 27001: a clause-by-clause working mapping (and where ISO stops short)

Every NIS2 Article 21(2) measure mapped to ISO 27001:2022 Annex A — and the three real gaps: reporting clock, management liability, supply chain depth.

nis2 iso-27001 compliance regulatory-intelligence mcp