Guides to ISO 27001, GDPR, and the machinery of trust, written for people shipping product, not reading standards.
Ask three consultants what ISO 27001 costs and you'll get three proposals, none with a number on page one. Here's the actual arithmetic.
20 Aug 2026 · 8 min read TIMELINEConsultants say six months. Vendors say 30 days. Both are marketing. A realistic week-by-week timeline, and the two things that actually set your date.
13 Aug 2026 · 7 min read STRATEGYSelling into Europe? The spreadsheet asks for ISO 27001. Selling into the US? SOC 2. Here's how the two actually differ, and the order that makes sense.
6 Aug 2026 · 7 min read DEEP DIVEThe SoA is one table, and the single most scrutinised document in your audit. What it must contain, and why generating it beats writing it.
30 Jul 2026 · 6 min read DEEP DIVEThe risk assessment is the engine of your ISMS, and the artefact most likely to be a 200-row spreadsheet nobody opens. It doesn't have to be.
23 Jul 2026 · 7 min read STRATEGYGDPR compliance and ISO 27001 certification are usually run as separate projects. That's double the work for half the coherence, they share a spine.
16 Jul 2026 · 6 min read SALESThe 300-question spreadsheet arrives after the demo goes well. Here's how fast-moving teams answer in hours, and how the best deals skip the spreadsheet entirely.
9 Jul 2026 · 6 min read PLAYBOOKConsultants exist because the standard reads like it needs an interpreter. It doesn't anymore. The complete playbook, from zero to certificate.
2 Jul 2026 · 9 min readConnect your stack, answer a few questions, and see your gap assessment today.
Start today