Am I Building Real DevOps Expertise or Just Collecting Broad Experience?
I have about one year of professional DevOps experience at a mid-sized service company in Mumbai. Since I am currently the only DevOps person on my team, I…
ISO 27001
Am I Building Real DevOps Expertise, or Just Collecting Broad Exposure?
I have about one year of professional DevOps experience at a mid-sized service company in Mumbai. I'm currently the only DevOps-focused person on my team, so I handle…
How should we prioritize NIS2 readiness when we already have ISO 27001 certification?
We recently came into scope for NIS2, and with the October deadline approaching, I'm trying to decide how to focus our remaining effort. We already hold ISO 27001…
How should we prioritize NIS2 readiness when we already have ISO 27001?
Our organization is already ISO 27001 certified, so I expected that much of the NIS2 work would transfer directly. Our access controls, privileged-account management, audit logging, supplier-management process,…
Feedback on My Disaster Recovery Plan and Runbook Structure
I'm a solo junior SRE responsible for a web application with IoT components. Our infrastructure includes Docker Swarm, Kafka, Redis, and several other clustered services. The servers are…
Looking for VPN Recommendations with ISO 27001 Certification
I'm currently navigating a vendor assessment process, and one of the compliance requirements is for any security tools we recommend to have certifications recognized by our auditors. It's…
What are the best methods to securely erase hard drives in compliance with ISO 27001?
I'm currently using an old HP server to handle the erasure of hard drives with O&O SafeErase, but I've found the reporting features lacking. This issue came up…
What's the Best Way to Safely Erase HDDs for ISO 27001 Compliance?
I'm currently working with an old HP server to erase disks using O&O SafeErase, but the reporting functionality isn't meeting our expectations. This issue was pointed out in…
Differences Between Cyber Essentials and ISO 27001: How to Prepare for Compliance?
I'm curious about the main differences between Cyber Essentials (CE) and ISO 27001. I previously helped a business achieve CE certification by following the "CE requirements for IT…