Articles
The ISO 27001 audit cycle includes Stage 1 and Stage 2 certification audits, ongoing surveillance audits and recertification. Learn what each stage involves and how to maintain your ISMS between audits.
Vanta automates evidence collection and monitors technical controls, but ISO 27001 also requires risk decisions, tailored policies and effective organisational controls. Learn where expert support fills the gaps.
Vulnerability assessments identify potential weaknesses, while penetration testing validates what an attacker could actually exploit. Learn how they differ and why organisations often benefit from both.
The Essential Eight provides Australian organisations with eight practical cyber security strategies to reduce risk. Learn what each strategy covers, how maturity levels work and how to start improving your security posture.
Zammad vulnerabilities CVE-2026-102489 and CVE-2026-102490 require attention from organisations running self-hosted installations. Learn which versions are affected and how to reduce exposure.
FortiMail zero-day CVE-2026-104286 affects internet-facing email security appliances. Learn what the vulnerability means, who is affected and what organisations should do now.
A cyber security audit provides a structured review of your controls, policies and practices to identify security gaps and risks. Learn what an audit covers, how it differs from penetration testing and when your business needs one.
ISO 27001 Annex A 8.8 requires organisations to manage technical vulnerabilities. Learn how penetration testing identifies, validates and provides evidence of exploitable weaknesses.
ISO 27001, SOC 2 and the Essential Eight serve different markets and buyer requirements. Learn how each differs and how to identify which security credential your customers actually want.
Steam's BrokenPipe vulnerability allows an unprivileged Windows user to escalate to SYSTEM through the Steam Client Service. With no patch available, organisations should review exposure and apply mitigations.
Business email compromise uses impersonation and deception to trick staff into transferring money or sensitive information. Learn how verification, MFA, awareness and monitoring can reduce BEC risk.
Vanta automates evidence collection and technical control monitoring, but ISO 27001 still requires judgement around scoping, risk, policies and audits. Learn when a consultant or virtual CISO adds value.