Cybersecurity Insights & Guides
Expert insights on cybersecurity, vulnerability management, and digital defence strategies.
Why the firm that prepares you cannot be the firm that certifies you
No certification body may prepare you for its own audit, nor may any entity under its organisational control. Where a related body prepares you, it shall not certify you for two years.
Who issues an ISO 27001 certificate, and what every other party produces
An ISO 27001 programme produces four kinds of document and no party produces more than two. Who holds the certificate, the accreditation, and the Statement of Applicability.
The Indian law that names ISO 27001 — and what changes on 13 May 2027
One Indian rule names IS/ISO/IEC 27001 in its own text and deems an audited implementation compliance with the IT Act. A later Act omits the provisions it was made under.
SOC 2 Type 1 and Type 2: one date, one period, and a deadline already given
A Type 1 opinion speaks about one date. A Type 2 speaks about a stretch of time that has already closed by the time anyone reads the report. Most of the cost follows from that.
"SOC 2 certified" is a phrase that cannot be true — and what you receive instead
Ask a supplier for their SOC 2 certificate and you will be sent a PDF. It will not be a certificate, and the difference changes what the document tells you and what you may do with it.
ISO 27001 certification: what it costs, how long it takes, and what decides both
Two quotes for the same programme, and the gap is not a discount. Half of what is sold is derived under a normative annex and can be compared line by line. The other half cannot.
Internal audit and management review: the two clauses your certifier may not do
Clause 9.2 requires an internal audit and clause 9.3 a management review. A certification body looks for both at Stage 1, again at Stage 2, and at every surveillance audit after that.
Have a question this did not answer?
Our team answers regulatory and testing questions directly — no discovery call required to get a straight answer.
Talk to our team