email-svg
Get in touch
info@canadiancyber.ca

Blog

OUR BLOG

Our Latest News & Blogs

2026
Sep

Performance Metrics Audit Guide

An ISO 27001 management review audit should prove that leadership actively reviews ISMS performance and makes clear decisions. Internal auditors should test risk review, audit findings, corrective actions, security objectives, incidents, resource decisions, action owners, due dates, and follow-up instead of relying on basic meeting notes.
2026
Sep

ISO 27001 Management Review Minutes for Real Decisions

ISO 27001 management review minutes should prove that leadership reviewed ISMS performance and made real decisions. This guide explains how to audit risks, internal audit findings, corrective actions, security objectives, incidents, resource needs, previous actions, owners, deadlines, and management follow-up before certification.
2026
Sep

ISO 27001 Clause 9 Internal Audit

An ISO 27001 Clause 9 internal audit tests whether the organization monitors, measures, audits, and reviews ISMS performance effectively. This guide covers security KPIs, information security objectives, control performance, internal audit evidence, findings, corrective actions, management review, leadership decisions, and certification readiness.
2026
Sep

How to Audit Change Management Evidence for ISO 27001

An ISO 27001 change management audit should prove that changes are reviewed, approved, tested, implemented, and assessed for security and compliance impact. Learn how to audit change tickets, security reviews, approvals, testing evidence, rollback plans, emergency changes, cloud and AI changes, risk updates, and post-change reviews before certification.
2026
Sep

ISO 27001 Clause 8 Internal Audit

An ISO 27001 Clause 8 internal audit tests whether planned security controls actually operate in daily workflows. This guide explains how to audit access management, vendor reviews, change management, backups, logging, incidents, AI tools, repeated risk assessments, risk treatment actions, and operational evidence before certification.
2026
Sep

ISO 27001 Document Control Audit Guide

An ISO 27001 document control audit should verify that policies, procedures, and ISMS records are current, approved, version-controlled, owner-assigned, reviewed on schedule, and published in a controlled location. Learn how to test document registers, approval history, obsolete documents, SharePoint permissions, communication evidence, and certification readiness.