10 items with this tag.
Security governance portfolio organised around core ISMS capabilities, a management system that delivers value beyond the compliance certificate
A 7-article series on implementing systematic security documentation within ISMS frameworks, from foundational concepts to practical implementation templates
Sten Eikrem - Information Security & Cybersecurity Governance | Risk Management | IT/OT Security in Manufacturing
Every organisation has an ISMS. Most of them don't have a management system. Here's the difference, and why it matters under NIS2.
Without understanding the full system context, risk assessments default to compliance control catalogue validation. Security concepts, widely used in military classified systems, offer a better path.
Most security governance is theatre. Committees that rubber-stamp, decisions that decide nothing, metrics that measure activity not outcomes. Here's how to build governance that actually works.