Guidance · Situations
Where are you right now?
Pick the moment you are in. Each one is a short reading path through questions already answered on CISO Times, in the order that helps most, then the pack documents to use and, where there is one, a tool.
I've just become CISO
The first 90 days in a security function someone else built.
The auditor arrives in six weeks
A Stage 1 or Stage 2 ISO 27001 audit is in the diary.
We may have to tell a regulator
An incident is open and a reporting clock may be running.
The board wants a cyber update
A board or committee paper is due and the last one was a status report.
A customer sent a 300-question questionnaire
A deal is waiting on your security answers.
We have decided to get ISO 27001 certified
The decisions to take in order, then the documents to work from, up to the first certification audit.
These are reading paths, not checklists. Nothing is ticked off or saved, and you can start at any step.