email-svg
Get in touch
info@canadiancyber.ca

Blog

OUR BLOG

Our Latest News & Blogs

2026
Oct

Audit Your Package Controls Before Attackers Do

Software supply chain risk can hide deep inside open-source libraries, third-party packages, transitive dependencies, CI/CD pipelines, and supplier software. This guide explains how ISO 27001 internal auditors can test SBOMs, dependency visibility, vulnerability management, package integrity, supplier controls, and audit evidence.
2026
Oct

SBOM Evidence Under ISO 27001

Software supply chain risk can enter your environment through open-source packages, third-party components, transitive dependencies, software suppliers, and CI/CD pipelines. Learn how ISO 27001 internal auditors can test SBOMs, dependency inventories, vulnerabilities, package sources, supplier controls, and audit evidence.
2026
Oct

Your Dependency Tree Is Part of Your ISMS

Software supply chain risk can enter your environment through open-source packages, third-party components, transitive dependencies, CI/CD pipelines, and software suppliers. Learn how ISO 27001 internal auditors can assess dependency inventories, SBOMs, vulnerable components, package sources, supplier controls, remediation, and audit evidence.
2026
Oct

Build a Machine Identity Register in SharePoint for ISO 27001 Audit Readiness

Build a machine identity register in SharePoint to manage service accounts, service principals, workload identities, bots, API identities, and AI agents. Learn how to track ownership, access, permissions, credential expiry, review dates, risk, lifecycle status, and ISO 27001 audit evidence in one structured register.
2026
Oct

How to Find and Audit Accounts Nobody Owns

Orphaned workload identities can retain access long after an employee leaves, an application is retired, or a project ends. Learn how ISO 27001 internal auditors can identify ownerless service accounts, service principals, managed identities, and AI agents, review their permissions and activity, and safely remove unnecessary access.
2026
Oct

From Service Accounts to Agent Identities

Least privilege is easy to state in a policy but harder to prove. Learn how ISO 27001 internal auditors can perform a least privilege audit across service accounts, workload identities, service principals, and AI agents using ownership, permissions, approvals, activity logs, access reviews, and lifecycle evidence.