Topic
Certification
6 guides on Certification — practical, audit-tested, and honest about the hard parts.
ISO 27001 Surveillance Audits: Keeping the Certificate After Year One
Certification starts a three-year cycle, and the second audit catches out more teams than the first. The six things always checked, what separates a major from a minor, and the annual rhythm that makes surveillance boring.
8 min read · 16 October 2026
What ISO 27001 Certification Actually Costs in 2026
Five vendors will quote you five numbers between £5,000 and £100,000. The spread exists because they are quoting different things. The four separate cost buckets, a worked three-year example for a 40-person SaaS, and where teams overspend.
10 min read · 18 September 2026
ISO 42001: Building an AI Management System
The first certifiable standard for AI management systems. What an AIMS covers, how it relates to ISO 27001 and the EU AI Act, and a practical path to certification.
2 min read · 16 June 2026
HITRUST CSF: The Healthcare Security Certification Explained
HIPAA tells you what to protect; HITRUST certifies that you do. The three assessment types (e1/i1/r2), how it harmonises HIPAA, NIST and ISO, and how to certify.
2 min read · 13 June 2026
ISO 27701: A Privacy Extension to Your ISMS
ISO 27701 extends ISO 27001 into a Privacy Information Management System. What it adds for controllers and processors, how it maps to GDPR, and how to certify on top of your ISMS.
2 min read · 12 June 2026
Cyber Essentials & Cyber Essentials Plus: A UK Guide for 2026
The UK NCSC-backed scheme explained — the five technical controls, the difference between Cyber Essentials and Plus, why it matters for public-sector contracts, and how to certify.
2 min read · 24 May 2026