Blog
ISO27001 explained – A6 People controls
In this article, we explain the new ISO 27002:2022 chapter 6 – People controls. This covers the controls required for secure human resources management. This is the second article in a series of four, each article covering one chapter: Organization controls (chapter 5) People controls (chapter 6) – This article Physical controls (chapter 7) Technological…
Sieuwert van Otterloo
ISO27001 explained – A5 Organizational controls
The information security standard ISO 27001 consists of a main structure and an annex of recommended controls. The recommended controls are further explained in an additional standard ISO 27002. The main structure explains how a well-functioning ISMS (Information Security Management System) should be set up and maintained. The controls are specific actions that organisations should…
Pavlo Burda
ISO27002:2022 – what’s new?
ISO 27001:2013, a certification standard for Information Security Management systems, uses an extensive list of example control measures that organisations have to comply with, or explain the control is not applicable (comply or explain). This list of 114 controls is elaborated on in ISO 27002, showing how to implement them in practice. After eight years,…
Joost Krapels
Public perception on the responsibility for incidents involving autonomous vehicles
https://doi.org/10.54822/QBYL2425 This paper has been published in the “Computer and Society Research Journal“, a free to publish, open access journal for socially relevant computer science research. PDF Download Download the full article for free Abstract We conducted a survey to investigate the public perception of the blame for incidents where autonomous vehicles (AVs) make poor…
Sieuwert van Otterloo
New OWASP Top Ten 2021
Every few years, the OWASP Top Ten, a popular list of ten important risks for web applications, is updated. At the moment of writing this article, the Open Web Application Security Project (OWASP) version 2021 has just been released. In this article, we give a short explanation how the OWASP Top Ten works, and what…
Joost Krapels