21 November 2025
Knowledge
ISO 27001
What is ISO 9001?
ISO 9001 is the international standard that sets out the criteria for a quality management system (QMS). The Standard will help you monitor and manage quality, measure performance, and benchmark your organisation’s service using seven quality management principles.
ISO 9001 is globally recognised as the top standard for ensuring quality products and services, with over one million certifications worldwide.
What is the main objective of ISO 9001?
The main objective of ISO 9001 is to provide a set of requirements for a quality management system that can be used by any organisation, regardless of its size or industry, to consistently meet customer requirements and enhance customer satisfaction.
What are the 7 principles of ISO 9001?
ISO 9001 requires organisations to satisfy customer needs and expectations by providing quality products and services. Organisations must also monitor customer feedback and use it to continuously improve their products, services, and processes.
Top management should lead quality management and set a clear vision for the business. They should demonstrate commitment to the QMS and ensure that all employees understand its importance in achieving customer satisfaction.
Top management should also create a culture of continual improvement, set quality objectives and communicate them throughout the organisation.
ISO 9001 states that organisations should involve their employees in the development and implementation of their quality management system. This includes providing training and support to ensure that employees understand and use the QMS.
Organisations should also ensure that the roles, responsibilities and authorities of personnel are clearly defined and communicated.
The process approach is based on managing an organisation’s processes as a system to achieve consistent results. It involves identifying, analysing and managing processes and their interactions to improve overall performance.
ISO 9001 states that organisations should regularly review their processes and systems to identify areas of improvement and make changes accordingly. It also encourages organisations to seek feedback from customers and stakeholders on the effectiveness of their processes and services.
This principle is key to ensuring quality standards are maintained and continually improved upon.
ISO 9001 emphasises evidence-based decision making, which uses data and objective evidence.
This principle requires that decisions are based on facts, not opinion or intuition. This means that decision makers should use accurate, reliable and verifiable data to inform their decisions. This approach leads to better decision-making and fairness.
ISO 9001 requires organisations to manage relationships with customers and other stakeholders in a systematic and effective way.
The standard outlines principles of relationship management such as understanding customer needs, building trust, managing complaints, responding to feedback and providing consistent service.
Organisations must have a plan for managing customer relationships, which should involve monitoring customer satisfaction, building customer loyalty and prioritising customer-centred activities.
ISO 9001:2015
ISO 9001 was updated in 2015 to remain relevant and allow more flexibility when implementing a QMS. The revised Standard places greater focus on risk-based thinking to ensure that the QMS is cost-effective regardless of the size or nature of the organisation, and also changes some of the terminology to allow a QMS to address service quality as well as product quality.
Why should you implement an ISO 9001 QMS?
ISO 9001 provides organisations with a way to show they consistently provide quality products and services. An ISO 9001 QMS will help you to:
What are ISO 9001’s requirements?
The requirements include:
Establishing a Quality Management System (QMS): Organisations must develop and implement a QMS that meets the requirements of ISO 9001 and is suitable for their needs.
Documentation: Organisations must document their QMS and the processes, procedures and documents necessary to ensure consistent performance.
Management responsibility: Senior management must demonstrate their commitment to the QMS by establishing quality objectives, providing resources and conducting management reviews.
Resource management: Organisations must identify and provide the necessary resources for the effective implementation and maintenance of the QMS.
Product realisation: Organisations must ensure that their products and services meet customer requirements and applicable regulations.
Measurement, analysis, and improvement: Organisations must monitor, measure, analyse and improve their QMS processes.
Get started with ISO 9001
Adopting a QMS is a strategic decision that will improve performance, customer satisfaction and operational efficiency. To help you get started with your ISO 9001 project, we suggest using the following tools:
This is the current version of ISO 9001. It specifies the requirements for a quality management system (QMS) and is essential for any organisation looking to implement a certified QMS.
Organisations must demonstrate their compliance with ISO 9001, which can include thousands of pages of documentation for more complex businesses.
Our ISO 9001:2015 QMS Documentation Toolkit provides all the direction and tools you need to streamline your implementation project.
ISO 9001 Foundation Training Course
This one-day staff awareness training course is delivered by an experienced ISO 9001 consultant and trainer. This in-house course, delivered at your organisation, is an ideal way to ensure all staff have the same level of training. This course can be tailored to your organisation’s own policies and procedures.
ISO 9001 quality management consultancy
IT Governance consultants use methodologies and tools that have been developed and honed over 10 years.
We offer a free initial assessment to show you where you stand with ISO 9001 and the steps necessary for success. A fixed-price proposal will be offered to help you quickly assess the value of using IT Governance to achieve ISO 9001 certification.
Nine good reasons for using the IT Governance consultancy service to assist your ISO 9001 project:
Keep reading
Uncategorized
Test Gated Post
01 December 2025
·
Knowledge
What is Cyber Security? Definition and Best Practices
28 November 2025
·
Knowledge
UK Government Minimum Cyber Security Standard
28 November 2025
·
Knowledge
Transitioning to ISO 27001:2022 | GRC Solutions
28 November 2025
·
Knowledge
SWIFT CSCF Compliance | IT Governance Ltd
28 November 2025
·
Knowledge
Speak to a cyber security expert
28 November 2025
·
Knowledge
What is Social Engineering? Examples & Prevention Tips
28 November 2025
·
Knowledge
Securities and Exchange Commission Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure
28 November 2025
·
Knowledge
The Sarbanes-Oxley Act | GRC Solutions
27 November 2025
·
Knowledge
What is Phishing? Attack Techniques & Prevention Tips
27 November 2025
·
Knowledge
NIST Cybersecurity Framework (CSF) | GRC Solutions
27 November 2025
·
Knowledge
Operators of Essential Services and the NIS Regulations
27 November 2025
·
Knowledge
Digital Service Providers and the NIS Regulations
26 November 2025
·
Knowledge
NIS Regulations: Cyber Assessment Framework
26 November 2025
·
Knowledge
The NIS Directive and NIS Regulations
26 November 2025
·
Knowledge
Management system integration
26 November 2025
·
Knowledge
ITSM (IT Service Management)
26 November 2025
·
Knowledge
GRC Solutions ITIL and ITSM books
26 November 2025
·
Knowledge
ITIL®
26 November 2025
·
Knowledge
IT Governance: definition & explanation
26 November 2025
·
Knowledge
ISO 27701
26 November 2025
·
Knowledge
ISO 27017 and ISO 27018 Cloud security | GRC Solutions
26 November 2025
·
Knowledge
ISO 27005
26 November 2025
·
Knowledge
ISO 27001 Risk Assessments
26 November 2025
·
Knowledge
FastTrack™ | ISO 27001 | GRC Solutions
26 November 2025
·
Knowledge
Typical ISO 27001 certification costs
26 November 2025
·
Knowledge
Key Benefits of ISO 27001 Certification
26 November 2025
·
Knowledge
ISO/IEC 27001:2022 and ISO/IEC 27002:2022
26 November 2025
·
Knowledge
iso27001 2022 transition training
26 November 2025
·
Knowledge
ISO27001
26 November 2025
·
Knowledge
iso27000 family
26 November 2025
·
Knowledge
ISO22301 business continuity standard
26 November 2025
·
Knowledge
ISO20000
21 November 2025
·
Knowledge
ISMS Benefits
21 November 2025
·
Knowledge
Infosec
21 November 2025
·
Knowledge
Implementing ISO27001
21 November 2025
·
Knowledge
GDPR and ISO 27001
21 November 2025
·
Knowledge
Gambling Commission Compliance
21 November 2025
·
Knowledge
Federal Cybersecurity and Privacy Laws
21 November 2025
·
Knowledge
EU Digital Operational Resilience Act
21 November 2025
·
Knowledge
EU Cybersecurity Act
21 November 2025
·
Knowledge
Email Security
21 November 2025
·
Knowledge
DFARS
21 November 2025
·
Knowledge
Data Classification Software
21 November 2025
·
Knowledge
Cyber Threats
21 November 2025
·
Knowledge
Cyber Security Standards
21 November 2025
·
Knowledge
Cyber Security Risk Management
21 November 2025
·
Knowledge
Cyber Security Risk Assessment
21 November 2025
·
Knowledge
Cyber Security Consultancy Services
21 November 2025
·
Knowledge
Cyber Resilience Framework
21 November 2025
·
Knowledge
Cyber Resilience
20 November 2025
·
Knowledge
Cyber Incident Response
20 November 2025
·
Knowledge
Cyber Crime
20 November 2025
·
Knowledge
Compliance
20 November 2025
·
Knowledge
Cloud Security
20 November 2025
·
Knowledge
Capability Maturity Model
20 November 2025
·
Knowledge
Business Resilience
20 November 2025
·
Knowledge
Benefits of ISO 22301
20 November 2025
·
Knowledge
BC DR
20 November 2025
·
Knowledge
Advanced Persistent Threats APT
20 November 2025
·
Knowledge
Accredited Certification
20 November 2025
·
Articles
SOC reporting
20 November 2025
·
Knowledge
The pecr and eu eprivacy directive
20 November 2025
·
Knowledge
GDPR privacy compliance framework and standards
20 November 2025
·
Knowledge
GDPR Data Mapping
20 November 2025
·
Knowledge
GDPRConsultancy
20 November 2025
·
Knowledge
GDPR Compliance with ISO 27001
20 November 2025
·
Knowledge
GDPR Anniversary
20 November 2025
·
Knowledge
ePrivacy Regulation EPR
20 November 2025
·
Knowledge
DPO as a Service
20 November 2025
·
Knowledge
DPA and GDPR penalties
20 November 2025
·
Knowledge
GDPR Gap Analysis
19 November 2025
·
Knowledge
DPA 2018 part 4 intelligence processing
19 November 2025
·
Knowledge
DPA 2018 part 3 law enforcement processing
19 November 2025
·
Knowledge
DPA 2018
19 November 2025
·
Knowledge
Data subject access requests
19 November 2025
·
Knowledge
Data Sovereignty and the Cloud
19 November 2025
·
Knowledge
Data protection officer dpo under the gdpr
19 November 2025
·
Knowledge
Data Protection dpa and eu data protection regulation
19 November 2025
·
Knowledge
Data Protection
19 November 2025
·
Knowledge
Data Privacy
19 November 2025
·
Knowledge
Data Governance
19 November 2025
·
Knowledge
Data Breaches
19 November 2025
·
Knowledge
Articles of the GDPR
19 November 2025
·
Knowledge
PCI DSS | What It Is and How to Comply
19 November 2025
·
Knowledge
Vulnerability testing for Cyber Essentials
19 November 2025
·
Knowledge
Cyber Essentials: Secure Configuration
19 November 2025
·
Knowledge
Cyber Essentials: Patch Management
19 November 2025
·
Knowledge
Cyber Essentials: Malware Protection
19 November 2025
·
Knowledge
ISO 27001 and the Cyber Essentials Scheme
19 November 2025
·
Knowledge
Defining the scope for Cyber Essentials certification
19 November 2025
·
Knowledge
The Cyber Essentials Scheme
19 November 2025
·
Knowledge
Cyber Essentials Repeat Testing and Assessment Fees
18 November 2025
·
Knowledge
The Cyber Essentials SAQ (Self-Assessment Questionnaire)
18 November 2025
·
Knowledge
Cyber Essentials for the MOD Supply Chain
18 November 2025
·
Knowledge
Cyber Essentials FAQs
18 November 2025
·
Knowledge
Cyber Essentials Benefits
18 November 2025
·
Knowledge
Cyber Essentials: Boundary Firewalls and Internet Gateways
18 November 2025
·
Case Study
Cyber Essentials Plus Case Study
18 November 2025
·
Knowledge
Cyber Essentials: User Access Control
18 November 2025
·
Knowledge
What is AI governance and why does it matter?
18 November 2025
·
Knowledge
ISO 42001: What it is and why it matters for AI management
18 November 2025
·
Knowledge
The EU AI Act: what it means for your organisation and how to comply
18 November 2025
·
White Papers
CISSP study planner
18 November 2025
·
Blog
IT Standards | GRC Solutions
18 November 2025
·
Blog
Become an GRC Solutions channel partner
18 November 2025
·
White Papers
Ethical Hacking Career Roadmap
17 November 2025
·
White Papers
Cyber Essentials – 2025 Scheme Changes: What You Need to Know
17 November 2025
·
Articles
Global Data Breaches and Cyber Attacks in October 2025 – At Least 21.2 Million Breached Records
14 November 2025
·
Articles
GRC Solutions Named Among the UK’s Top 20 Cyber Security Innovators
14 November 2025
·
Articles
Data Leakage Prevention and Data Deletion – ISO 27001 Controls 8.12 and 8.12 Explained
13 November 2025
·
Articles
Threat Intelligence – ISO 27001:2022 Control 5.7 Explained
06 November 2025
·
Articles
How DORA fits with ISO 27001, NIS2 and the GDPR
03 November 2025
·
Articles
CISM Exam Tips from a Consultant: Five Insider Insights to Help You Pass
03 November 2025
·
Articles
How To Comply with ISO 27001’s New Cloud Services Control
03 November 2025
·
Articles
What DORA Means for ICT Suppliers: MSPs, SaaS and Cloud in Scope
31 October 2025
·
Knowledge
Cyber Security Must Be a Board Priority – And It Starts With Cyber Essentials
28 October 2025
·
Articles
Top 5 Skills Every ISO 27001 Internal Auditor Needs
22 October 2025
·
Articles
AWS Outage: A Supply-Chain Security Lesson
21 October 2025
·
Articles
Global Encryption Day: Why Encryption Is a Core Requirement
21 October 2025
·
Articles
Why You Need Cyber Resilience and Defence in Depth
21 October 2025
·
Articles
ISO 27001:2022 Clause 6 – What’s Changed and What You Need to Do About It
21 October 2025
·
Articles
4 reasons to get CISMP qualified
20 October 2025
·
Articles
CISM vs CISSP: Which Certification is Right for You in 2025
17 October 2025
·
Articles
CISMP vs Security+: Which Certification is Right for You in 2025?
15 October 2025
·
Articles
ISO 27001 for Non-IT Roles: A Beginner’s Guide
15 October 2025
·
Articles
CRISC Salary & Career in the UK: What to Expect in 2025
10 October 2025
·
Articles
5 Practical Skills You’ll Gain from a GDPR Practitioner Course
10 October 2025
·
Articles
ISO 27001 Internal vs Lead Auditor Training Compared
10 October 2025
·
Articles
Global Data Breaches and Cyber Attacks in September 2025: Nearly 2 Million Records Exposed and Potentially 1.5 Billion More
08 October 2025
·
Articles
Is CISM Worth It? Salary, Career Value & Employer Demand in 2025
06 October 2025
·
Knowledge
5 Common GDPR Mistakes – and How Training can Fix Them
06 October 2025
·
Articles
5 Reasons ISO 27001 Implementations Fail (and How to Avoid Them)
03 October 2025
·
Articles
Our Experts’ Views on the Jaguar Land Rover Cyber Attack
01 October 2025
·
Knowledge
A Guide to the EU GDPR’s Requirements for an EU Representative
01 October 2025
·
Knowledge
Who Needs ISO 27001 Foundation Training?
01 October 2025
·
Knowledge
Human Error and Accidental Data Breaches: Lessons from Recent Cases
01 October 2025
·
Articles
How to Become a DPO (Data Protection Officer) in the UK
29 September 2025
·
Articles
How to Get Cyber Essentials Certified in 2025: Updated Steps and Key Changes
26 September 2025
·
Knowledge
GDPR Foundation vs Awareness Training: Which is Right for Your Team?
25 September 2025
·
Blog
The Data Protection Officer (DPO) Role – A beginner’s guide
25 September 2025
·
Articles
CISSP® Exam Myths: What Learners Get Wrong
22 September 2025
·
Articles
UK GDPR Representative Services: What You Need to Know
19 September 2025
·
Articles
How to Maintain ISO 27001 Certification: 7 Top Tips
16 September 2025
·
Articles
3 ISO 27001:2022 Controls That Help Secure Your Cloud Services
15 September 2025
·
Articles
How ISO 27001 Helps You Comply With DORA
15 September 2025
·
White Papers
Free White Paper: The EU AI Act and ISO 42001 – A Beginner’s Guide
13 September 2025
·
Knowledge
GDPR Data Protection Impact Assessments: The 7 Key Stages of the DPIA Process
10 September 2025
·
Articles
Global Data Breaches and Cyber Attacks in August 2025: over 17.3 million records exposed
08 September 2025
·
Knowledge
Cyber Essentials: The 5 Cost-Effective Security Controls Everyone Needs
19 August 2025
·
Articles
Nine Steps to SOC 2 Compliance – Including a SOC 2 Readiness Checklist
14 August 2025
·
Articles
Global Data Breaches and Cyber Attacks in July 2025: over 14.9 million records exposed
12 August 2025
·
Articles
Data Protection Enforcement: Your Cookie Compliance Questions Answered
08 August 2025
·
Knowledge
A Guide to TOMs (Technical and Organisational Measures) Under the GDPR
06 August 2025
·
Articles
What are the Different Types of Penetration Test?
05 August 2025
·
Knowledge
The Six Data Processing Principles of the UK GDPR Explained
01 August 2025
·
Articles
The 4 CRISC Domains Explained
28 July 2025
·
Articles
What Are ISO 27017 and ISO 27018, and What Are Their Controls?
23 July 2025
·
Articles
The 9 CISMP Domains Explained
21 July 2025
·
Articles
How One Weak Password Destroyed a 158-Year-Old Company
21 July 2025
·
Knowledge
Nine Steps to Conducting a GDPR Gap Analysis
18 July 2025
·
Knowledge
Are You Ready for Cyber Essentials?
18 July 2025
·
Knowledge
How to Write a GDPR Data Retention Policy – with template
16 July 2025
·
Articles
The 4 CISM Domains Explained
14 July 2025
·
Articles
Choosing the Right PCI DSS SAQ: A Practical Guide
11 July 2025
·
Articles
Information Security vs Cyber Security: The Difference
09 July 2025
·
Articles
The 5 CISA Domains Explained
07 July 2025
·
Articles
How ISO 42001 supports EU AI Act compliance
04 July 2025
·
Articles
Global Data Breaches and Cyber Attacks in June 2025: Over 16 billion records exposed
04 July 2025
·
Articles
7 Steps to a Successful ISO 27001 Risk Assessment (Updated for 2025)
02 July 2025
·
Knowledge
How to Write a GDPR Data Protection Policy (Updated for 2025)
01 July 2025
·
Articles
Building Your Cyber Security Career: The Credentials Needed for Management and Specialist Roles
30 June 2025
·
Knowledge
How to Respond to a DSAR (Data Subject Access Request)
30 June 2025
·
Knowledge
How to Write a GDPR Data Privacy Notice – Updated Guide and Template for 2025
24 June 2025
·
Knowledge
The Critical Role of a DPO: Why Outsourcing is the Smart Choice
20 June 2025
·
Knowledge
The Data (Use and Access) Act and How it Affects the UK GDPR and DPA 2018, and PECR
19 June 2025
·
Articles
Understanding the CIA Triad in 2025: A Cornerstone of Cyber Security
18 June 2025
·
Articles
Global Data Breaches and Cyber Attacks in May 2025 – More Than 1.4 Billion Records Breached
17 June 2025
·
Articles
Penetration Testing for SaaS Providers: Building Trust and Security
12 June 2025
·
Articles
How to Start Your Career in Data Protection and Privacy
10 June 2025
·
Knowledge
GDPR Documentation: The Documents You Need to Comply with the UK and EU GDPR
09 June 2025
·
Articles
How to FastTrack your ISO 27001 ISMS Implementation and Certification
05 June 2025
·
Articles
Author of the Month: Bridget Kenyon
04 June 2025
·
Articles
CCTV and the GDPR in 2025: What Employers Must Know
03 June 2025
·
Knowledge
The GDPR in 2025: What’s the Difference between Personal Data and Special Category Data?
03 June 2025
·
Articles
Data Protection Gap Analysis: Identifying Weak Spots Before Regulators Do
29 May 2025
·
Knowledge
Lessons Learned from the Legal Aid Agency Data Breach
22 May 2025
·
Articles
How to Spot a Phishing Email in 2025 –with Real Examples and Red Flags
16 May 2025
·
Articles
The Co-op, M&S, Harrods… You? Mitigating the Risk of Ransomware
13 May 2025
·
Articles
The 8 CISSP domains explained
08 May 2025
·
Articles
Windows 10 End of Life: What Does it Mean for Your Organisation?
02 May 2025
·
Articles
Author of the Month: Richard Bingley
01 May 2025
·
Articles
Author of the Month: Andrew Pattison
01 April 2025
·
Knowledge
The Cyber Essentials Scheme’s 2025 Update and What it Means for Your Organisation
20 March 2025
·
Knowledge
What It Takes to Be Your Organisation’s DPO or Data Privacy Lead
20 January 2025
·
Articles
Free Expert Insights: Index of Interviews
15 January 2025
·
Articles
How Can Organisations Transition to ISO 27001:2022?
14 January 2025
·
Articles
The Benefits of Becoming an Ethical Hacker
13 January 2025
·
Knowledge
Step-by-Step Guide to Achieving GDPR Compliance
08 January 2025
·
Articles
How You Can Continually Improve Your ISO 27001 ISMS (Clause 10)
06 January 2025
·
Knowledge
How a GDPR Gap Analysis Helps Secure Support From Senior Management
11 December 2024
·
Articles
How to Select Effective Security Controls
09 December 2024
·
Articles
Cyber Threats During the Holidays: How to Stay Safe From Seasonal Scams and Data Breaches
04 December 2024
·
Knowledge
Cyber Essentials vs ISO 27001: Key Differences
02 December 2024
·
Articles
Meet the Hacker: How Simulated Phishing Addresses Your Biggest Security Risk
27 November 2024
·
Articles
Breaking In to Keep Hackers Out: The Essential Work of Penetration Testers
25 November 2024
·
Knowledge
How Do the Cyber Essentials and Cyber Essentials Plus Assessments Work?
20 November 2024
·
Articles
How to Create a Strong Security Culture
18 November 2024
·
Articles
Your Biggest Security Risk: The Insider Threat
13 November 2024
·
Articles
Layering Defences to Safeguard Sensitive Data Within AI Systems
11 November 2024
·
Knowledge
How Organisations Are Failing to Process Personal Data Lawfully Under the GDPR
04 November 2024
·
Articles
The 6 CCSP Domains Explained
30 October 2024
·
Knowledge
GDPR: International Data Transfers Using the IDTA, SCCs or BCRs
28 October 2024
·
Articles
Strategies for Securing Your Supply Chain
23 October 2024
·
Articles
How to Meet the NCSC’s 14 Cloud Security Principles
21 October 2024
·
Articles
The Insider Threat: Strategies to Safeguard Against Malicious Insiders
16 October 2024
·
Knowledge
GDPR: Data Subject Rights and Organisations’ Responsibilities
14 October 2024
·
Knowledge
How Do You Demonstrate Accountability Under the GDPR?
08 October 2024
·
Articles
Security Risks of Outsourcing to the Cloud: Who’s Responsible?
03 October 2024
·
Articles
7 Steps to Prepare for PCI DSS Audit Success
01 October 2024
·
Articles
How to Overcome Unconscious Bias in the Workplace
24 September 2024
·
White Papers
GDPR Benchmark Report: Compliance Insights
17 September 2024
·
Articles
8 Ways to Reduce Your PCI DSS Compliance Burden
17 September 2024
·
Articles
How to Address AI Security Risks With ISO 27001
12 September 2024
·
Articles
How to Write a Modern Slavery Statement – 6-Step Guide
10 September 2024
·
Articles
How Do You Mitigate Information Security Risk?
05 September 2024
·
Articles
Where to Start with Cyber Security Risk Management
29 August 2024
·
Articles
Tips for Environmental Sustainability at Work and How ISO 14001 Can Help
27 August 2024
·
Knowledge
What Is Access Control and Why Do Cyber Essentials and ISO 27001 Require It?
21 August 2024
·
Knowledge
A Guide to GDPR International Transfers
20 August 2024
·
Articles
Online Merchants: PCI DSS Compliance Tips When Outsourcing
15 August 2024
·
Articles
Are You Meeting Your Occupational Health & Safety Requirements?
13 August 2024
·
Knowledge
Streamlining GDPR Compliance With ROPAs, Data Flow Maps and DPIAs
08 August 2024
·
Articles
5 Cyber Security and ISO 27001 Myths
01 August 2024
·
Articles
CrowdStrike: Lessons on the Importance of Contracts, Insurance and Business Continuity
30 July 2024
·
Articles
How to Easily Meet the PCI DSS Awareness Training Requirements
25 July 2024
·
Articles
ISO 27001:2022 Transition Challenges and How to Use ISO 27002
18 July 2024
·
Articles
Analysing Data Breaches Caused by Human Error
16 July 2024
·
Articles
The Good, the Bad and the Improvable of PCI DSS v4
11 July 2024
·
Articles
‘RockYou2024’: Nearly 10 BILLION Unique Plaintext Passwords Leaked
10 July 2024
·
Knowledge
GDPR Article 28 Contracts: What You Need to Know
09 July 2024
·
Knowledge
Records of Processing Activities (ROPAs): Simplifying GDPR Compliance
04 July 2024
·
Articles
Security Trends for 2024 and Beyond
28 June 2024
·
Articles
Creating an AI Policy – A Guide for SMEs
10 June 2024
·
Articles
Worrying Ransomware Trends, and What to Do About Them
07 June 2024
·
Articles
Security Tips and Concerns for Remote Working
31 May 2024
·
Articles
A Practical Guide to Cyber Incident Response
24 May 2024
·
Articles
ISO 27001 and Physical Security
15 May 2024
·
Articles
6,009,014 MovieBoxPro Accounts Breached in Another Data Scraping Incident
07 May 2024
·
Articles
Global Data Breaches and Cyber Attacks in 2024
02 May 2024
·
Articles
Global Data Breaches and Cyber Attacks in April 2024 – 5,336,840,757 Records Breached
02 May 2024
·
Articles
The Week in Cyber Security and Data Privacy: 22 – 28 April 2024
29 April 2024
·
Articles
Looking Back on the Channel Partner Event and Awards 2024
24 April 2024
·
Articles
The Week in Cyber Security and Data Privacy: 15 – 21 April 2024
22 April 2024
·
Articles
Cyber Defence in Depth: An Expert’s Overview
19 April 2024
·
Articles
The Week in Cyber Security and Data Privacy: 8 – 14 April 2024
15 April 2024
·
Articles
The Week in Cyber Security and Data Privacy: 1 – 7 April 2024
09 April 2024
·
Articles
Global Data Breaches and Cyber Attacks in March 2024 – 299,368,075 Records Breached
04 April 2024
·
Articles
An Expert Overview of CISM®
04 April 2024
·
Articles
The Week in Cyber Security and Data Privacy: 25 – 31 March 2024
02 April 2024
·
Articles
The Week in Cyber Security and Data Privacy: 18 – 24 March 2024
25 March 2024
·
Articles
The False Economy of Deprioritising Security
20 March 2024
·
Articles
The Week in Cyber Security and Data Privacy: 11 – 17 March 2024
18 March 2024
·
Articles
ISO 27001:2022 Annex A Controls Explained
13 March 2024
·
Articles
The Week in Cyber Security and Data Privacy: 4 – 10 March 2024
11 March 2024
·
Articles
Global Data Breaches and Cyber Attacks in February 2024 – 719,366,482 Records Breached
05 March 2024
·
Articles
The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024
05 March 2024
·
Articles
The Week in Cyber Security and Data Privacy: 19 – 25 February 2024
27 February 2024
·
Knowledge
Ashley Brett on Cyber Essentials Solutions
21 February 2024
·
Articles
The Week in Cyber Security and Data Privacy: 12 – 18 February 2024
21 February 2024
·
Articles
Maintaining GDPR and Data Privacy Compliance in 2024
16 February 2024
·
Articles
Sophie Sayer on the IT Governance Partner Programme
14 February 2024
·
Articles
The Week in Cyber Security and Data Privacy: 5 – 11 February 2024
14 February 2024
·
Articles
Your CVSS Questions Answered
09 February 2024
·
Articles
Elearning Staff Awareness Course Overview: Ransomware
07 February 2024
·
Articles
The Week in Cyber Security and Data Privacy: 29 January – 4 February 2024
06 February 2024
·
Articles
Global Data Breaches and Cyber Attacks in January 2024 – 29,530,829,012 Records Breached
05 February 2024
·
Articles
Expert Insight: Vanessa Horton on Anti-Forensics
02 February 2024
·
Articles
The Week in Cyber Security and Data Privacy: 22 – 28 January 2024
30 January 2024
·
Articles
‘Mother of All Breaches’: 26 BILLION Records Leaked
24 January 2024
·
Articles
The Week in Cyber Security and Data Privacy: 15 – 21 January 2024
23 January 2024
·
Articles
The Week in Cyber Security and Data Privacy: 8 – 14 January 2024
16 January 2024
·
Articles
The Week in Cyber Security and Data Privacy: 1 – 7 January 2024
09 January 2024
·
Articles
List of Data Breaches and Cyber Attacks in 2023 – 8,214,886,660 records breached
05 January 2024
·
Articles
Global Data Breaches and Cyber Attacks in December 2023 – 2,241,916,765 Records Breached
05 January 2024
·
Articles
Expert Insight: Adam Seamons on Zero-Trust Architecture
05 January 2024
·
Articles
The Weeks in Cyber Security and Data Privacy: 18 – 31 December 2023
04 January 2024
·
Articles
The Third-Party Threat for Financial Organisations
22 December 2023
·
Knowledge
Sam McNicholls-Novoa on CyberComply
20 December 2023
·
Articles
The Week in Cyber Security and Data Privacy: 11 – 17 December 2023
19 December 2023
·
Articles
The Week in Cyber Security and Data Privacy: 4 – 10 December 2023
11 December 2023
·
Articles
Data Breaches and Cyber Attacks in November 2023 – 519,111,354 Records Breached
05 December 2023
·
Articles
The Week in Cyber Security and Data Privacy: 27 November – 3 December 2023
05 December 2023
·
Articles
Expert Insight: Cliff Martin
28 November 2023
·
Articles
The Week in Cyber Security and Data Privacy: 20 – 26 November 2023
28 November 2023
·
Articles
Alan Calder on Cyber Resilience
24 November 2023
·
Articles
Risk Management under the DORA Regulation
23 November 2023
·
Articles
The Week in Cyber Security and Data Privacy: 13 – 19 November 2023
20 November 2023
·
Articles
Catches of the Month: Phishing Scams for November 2023
17 November 2023
·
Articles
The Week in Cyber Security and Data Privacy: 6 – 12 November 2023
13 November 2023
·
Articles
The Week in Cyber Security and Data Privacy: 30 October – 5 November 2023
06 November 2023
·
Articles
Expert Insight: Andrew Snow
06 November 2023
·
Articles
Data Breaches and Cyber Attacks in October 2023 – 867,072,315 Records Breached
03 November 2023
·
Articles
The Week in Cyber Security and Data Privacy: 23 – 29 October 2023
31 October 2023
·
Articles
Expert Insight: Stephen Hancock on SAQ SPoC
30 October 2023
·
Articles
The Week in Cyber Security and Data Privacy: 16 – 22 October 2023
24 October 2023
·
Articles
IT Governance Podcast 20.10.23: Casio, Cisco, MOVEit (again) and the ICC
23 October 2023
·
Articles
Catches of the Month: Phishing Scams for October 2023
13 October 2023
·
Articles
IT Governance Podcast 6.10.23: TikTok, Sony and MOVEit and DarkBeam
06 October 2023
·
Articles
List of Data Breaches and Cyber Attacks in September 2023 – 3,808,687,191 Breached Records
05 October 2023
·
Articles
Royal Family’s Website Targeted by Denial-of-Service Attack
02 October 2023
·
Articles
IT Governance Podcast 22.09.23: MGM Resorts, Microsoft Azure, International Criminal Court
22 September 2023
·
Articles
MGM Resorts suffers ransomware infection following social engineering attack
18 September 2023
·
Articles
Catches of the Month: Phishing Scams for September 2023
15 September 2023
·
Articles
IT Governance Podcast 08.09.23: Electoral Commission (again), Meta, Pôle emploi
07 September 2023
·
Articles
List of Data Breaches and Cyber Attacks in August 2023 – 79,729,271 Records Breached
06 September 2023
·
Articles
IT Governance Podcast 25.8.23: Tesla, Duolingo, Lapsus$ trial
24 August 2023
·
Articles
IT Governance Podcast 11.8.23: Electoral Commission, PSNI, Capita
10 August 2023
·
Articles
Catches of the Month: Phishing Scams for August 2023
07 August 2023
·
Articles
What is Vishing? Definition, Examples and Prevention
03 August 2023
·
Articles
List of Data Breaches and Cyber Attacks in July 2023 – 146 Million Records Breached
01 August 2023
·
Articles
What is Tailgating? Definition, Examples & Prevention
27 July 2023
·
Articles
Norwegian Government Hit by Widespread Cyber Attack
24 July 2023
·
Articles
What is Smishing? Definition, Examples and Prevention
19 July 2023
·
Articles
IT Governance Podcast 14.7.23: EU-US DPF, UK-US data bridge, MOVEit patches and other security fixes
13 July 2023
·
Articles
Red Team vs Blue Team: What’s the Difference?
13 July 2023
·
Articles
Data Breaches and Cyber Attacks Quarterly Review: Q2 2023
11 July 2023
·
Articles
Catches of the Month: Phishing Scams for July 2023
06 July 2023
·
Articles
List of Data Breaches and Cyber Attacks – June 2023
04 July 2023
·
Articles
IT Governance Podcast 30.6.23: ChatGPT, LetMeSpy and MS Teams, plus Alan Calder on cyber security
29 June 2023
·
Articles
Phone-Tracking App LetMeSpy Says It Has Been Hacked
29 June 2023
·
Articles
How to Recover From a Cyber Attack
27 June 2023
·
Articles
100,000 ChatGPT Accounts Hacked in Malware Attack
22 June 2023
·
Articles
10 Ways to Prevent Phishing Attacks in 2023
21 June 2023
·
Articles
IT Governance Podcast 16.6.23: MOVEit, LinkedIn, Spotify and Google Bard
15 June 2023
·
Articles
Ofcom Becomes the Latest Victim of MOVEit Supply Chain Attack
15 June 2023
·
Articles
API Penetration Testing Checklist
13 June 2023
·
Articles
51 Must-Know Phishing Statistics for 2023
08 June 2023
·
Articles
Catches of the Month: Phishing Scams for June 2023
06 June 2023
·
Articles
IT Governance Podcast 2.6.23: Capita, NHS, Meta, GDPR, DPDI Bill and Alan Calder on cyber regtech
01 June 2023
·
Articles
List of Data Breaches and Cyber Attacks – May 2023
01 June 2023
·
Articles
What is a DoS Attack?
31 May 2023
·
Knowledge
GDPR Article 32: Your Guide to the Requirements
23 May 2023
·
Articles
IT Governance Podcast 19.5.23: A Capita special, featuring pension providers, Colchester City Council and Alan Calder’s analysis
18 May 2023
·
Articles
What Is a Brute Force Attack? Definition, Prevention and Examples
17 May 2023
·
Articles
Eurovision Organisers Concerned About the Threat of Cyber Attacks
11 May 2023
·
Knowledge
Cyber Essentials Pricing in 2023: What You Need to Know
10 May 2023
·
Articles
Catches of the Month: Phishing Scams for May 2023
10 May 2023
·
Articles
IT Governance Podcast 5.5.23: ChatGPT, LockBit, T-Mobile and Alan Calder on cyber security for boards
04 May 2023
·
Articles
List of Data Breaches and Cyber Attacks in April 2023 – 4.3 Million Records Breached
02 May 2023
·
Articles
World Economic Forum: Organisations Must Invest in Security as ‘Catastrophic Cyber Event’ Looms
27 April 2023
·
Articles
IT Governance Podcast 21.4.23: Capita, Chrome, LockBit for Macs and Alan Calder on cyber security
20 April 2023
·
Articles
Capita Admits That Its ‘Cyber Incident’ Was Ransomware and That Customer Data Was Breached
20 April 2023
·
Articles
What Is Data Minimisation? Definition & Examples
18 April 2023
·
Articles
Data Breaches and Cyber Attacks Quarterly Review: Q1 2023
13 April 2023
·
Articles
April 2023’s Catch of the Month: Uncovering Phishing Scams
11 April 2023
·
Articles
IT Governance Podcast 2023-7: Capita, ChatGPT and TikTok (yet again)
05 April 2023
·
Articles
How to Prevent Malware Attacks: 8 Tips for 2023
05 April 2023
·
Articles
List of Data Breaches and Cyber Attacks in March 2023 – 41.9 Million Records Breached
03 April 2023
·
Knowledge
GDPR Article 17: What Is the Right to Erasure?
30 March 2023
·
Articles
Data Backups Are for Life, Not Just for World Backup Day
28 March 2023
·
Articles
IT Governance Podcast 2023-6: Ferrari, Dole, TikTok (again), Android
23 March 2023
·
Articles
TikTok Banned on UK Government Devices
16 March 2023
·
Articles
3 reasons cyber security training is essential
09 March 2023
·
Articles
IT Governance Podcast 2023-5: WH Smith, the Data Protection and Digital Information Bill, TikTok
09 March 2023
·
Articles
Catches of the Month: Phishing Scams for March 2023
07 March 2023
·
Knowledge
Cyber Essentials is Updating its Technical Requirements
02 March 2023
·
Articles
List of Data Breaches and Cyber Attacks in February 2023 – 29.5 Million Records Breached
01 March 2023
·
Articles
IT Governance Podcast 2023-4: EU-US Data Privacy Framework, Twitter 2FA, GoDaddy, HardBit 2.0
23 February 2023
·
Articles
Twitter’s Security Move: Charging Users for SMS Two-Factor Authentication
23 February 2023
·
Articles
Is Pepsi Okay? Bottling Plant Suffers Malware Attack
16 February 2023
·
Articles
IT Governance Podcast 2023-3: Bank security flaws ranked, ION ransom paid, MP hacked
09 February 2023
·
Articles
Phishing Alert: February 2023’s Notable Scams
07 February 2023
·
Articles
How to Investigate a Cyber Incident: 5-Step Guide
02 February 2023
·
Articles
List of Data Breaches and Cyber Attacks in January 2023 – 277.6 Million Records Breached
01 February 2023
·
Articles
IT Governance Podcast 2023-2: Mailchimp, fast food, T-Mobile, ice rinks, iOS update and ISO 27001
26 January 2023
·
Articles
What Are You Doing for Data Protection Day?
25 January 2023
·
Articles
NortonLifeLock Says Customer Accounts were Compromised in Credential-Stuffing Attack
19 January 2023
·
Articles
7 Ways to Avoid Physical Security Threats in the Workplace
17 January 2023
·
Articles
IT Governance Podcast 2023-1: more ransomware attacks on the education sector, and DPC and Meta sued
13 January 2023
·
Articles
Catches of the Month: Phishing Scams for January 2023
12 January 2023
·
Articles
Data Breaches and Cyber Attacks in 2022: 480 Million Breached Records
10 January 2023
·
Articles
Criminal Hackers Leak Email Addresses of 220 Million Twitter Users
05 January 2023
·
Articles
List of data breaches and cyber attacks in December 2022 – 31.5 million records breached
03 January 2023
·
White Papers
GDPR – A compliance guide
17 August 2021
·