ISO 27090 is out. Where does it fit?

What the new AI security standard covers, what it doesn't, and where it fits in your ISMS.

Oct 20 • Aron Lange

11

1

Why Your SoA Is Not Compliant

A recording from Aron Lange's live video

Oct 19 • Aron Lange

5

1

26:59

Your SoA would fit any company

Same certificate. Very different security.

Oct 13 • Aron Lange

5

Your RTOs Are Probably Made Up

My full BIA masterclass: how to determine recovery targets that can make your business survive.

Oct 9 • Aron Lange

5

1

20:02

July 2026

Updates in ISO 27000:2026 I did not expect

I really did not expect those...

Jul 14 • Aron Lange

7

1

Getting HR Ready for ISO 27001

Good auditors don't audit control lists — they audit the employee lifecycle. Here's how to prepare HR and IT together.

Jul 6 • Aron Lange

9

1

June 2026

Is ISO 42001 Really about AI "Governance"?

“AI Governance” is now firmly in the buzzword hall of fame.

Jun 22 • Aron Lange

16

1

I've Been Teaching ISO 27001 in the Wrong Order

If you’ve followed my work on implementing ISO/IEC 27001, you’ll know I teach it as a 12-step project.

Jun 11 • Aron Lange

8

7:00

258 auditors voted. Only 11% got it right.

From the “Test Your Auditor IQ” series

Jun 9 • Aron Lange

5

I was on a Podcast for Auditors!

What Will the Auditor Look For?

Jun 3 • Aron Lange

2

May 2026

Your ISMS Scope and Your Certification Scope Are Not the Same Thing

Here’s a question I get surprisingly often from people preparing for ISO 27001 certification: “Does our certificate have to cover our entire…

May 18 • Aron Lange

8

April 2026

C5:2026 – The New Standard for Cloud Security is Here

The German Federal Office for Information Security (BSI) has officially released the final version of the Cloud Computing Compliance Criteria Catalogue…

Apr 14 • Aron Lange

11