|
ISO 27001 ↔ NIS2 crosswalk hub
|
|
0
|
19
|
August 20, 2026
|
|
We got a security questionnaire. What now?
|
|
0
|
11
|
August 20, 2026
|
|
I don't have a security background. Can I actually use this?
|
|
1
|
12
|
August 20, 2026
|
|
What does the Risk Investigation Agent actually produce?
|
|
1
|
15
|
August 20, 2026
|
|
The AI flagged something I think is wrong. Where does that feedback actually go?
|
|
1
|
8
|
August 20, 2026
|
|
The risk agent proposed a treatment I'm not sure I trust. How do I check it before I commit?
|
|
1
|
7
|
August 20, 2026
|
|
Stuck on the Statement of Applicability: how do I justify a control as 'not applicable'?
|
|
1
|
9
|
August 20, 2026
|
|
How we scoped access control (A.5.15) without over-building it
|
|
1
|
19
|
August 20, 2026
|
|
We've been asked about NIS2, not ISO 27001. Are they the same thing?
|
|
1
|
11
|
August 20, 2026
|
|
How do I keep momentum over a months-long build without stalling every time I hit something I don't know?
|
|
1
|
6
|
August 20, 2026
|
|
Our evidence is scattered across drives and inboxes. How do we get audit-ready?
|
|
1
|
13
|
August 20, 2026
|
|
What does an auditor expect for the internal audit (clause 9.2)? We've never run one
|
|
1
|
9
|
August 20, 2026
|
|
How do I write a Statement of Applicability without drowning in all 93 controls?
|
|
1
|
9
|
August 20, 2026
|
|
What's the first thing an auditor will actually ask to see?
|
|
1
|
8
|
August 20, 2026
|
|
I'm not a security expert. Am I even the right person to own this?
|
|
1
|
9
|
August 20, 2026
|
|
Realistically, how long does this take and how much ongoing work is it?
|
|
1
|
11
|
August 20, 2026
|
|
Do I need to hire a consultant, or can we do this ourselves?
|
|
1
|
15
|
August 20, 2026
|
|
A customer says we need ISO 27001 to close the deal. Where do I even start?
|
|
1
|
10
|
August 20, 2026
|