ISO/IEC 27090:2026: AI security threats, governance and technical tests
Explore AI-specific attacks, trust boundaries and governance, then test one AI feature with the MicroApz checklist.
Read article →Blog / Field notes
Practical ideas for everyday compliance.
Short perspectives on evidence, security operations and focused software.
Post-quantum cryptography inventory: a practical starting guide
Before a migration plan can be credible, someone needs to know where the cryptography is.
Read article →Proposed SOC 2 criteria update: a practical readiness guide
A proposal is a reason to examine your programme, while continuing the work required for your current examination.
Read article →How to close the evidence loop after an access review
An access review is marked complete. Then someone asks what happened to the accounts that should have been removed.
Read article →How to define an audit scope: a practical guide
A scope statement can look complete until someone asks where the customer file went.
Read article →Evidence needs an owner.
Four details that turn a file into a useful review record.
Read article →Give a micro application one job.
Start with the handoff that needs to work better.
Read article →Looking for something you can use?
Find practical checklists and guides in Resources.