The Savadub Journal

A complete guide to Azure security reviews — covering Azure AD/Entra ID, NSGs, Defender for Cloud, Sentinel, CIS Benchmarks for Azure, and how to align your Azure environment to SOC 2, ISO 27001, and GDPR.

Understand ISO/IEC 27701, the international standard extending ISO 27001 with privacy controls. Learn how to build a PIMS, satisfy GDPR accountability requirements, and achieve certification.

Learn how ISO 9001:2015 helps organisations build quality management systems that improve customer satisfaction, reduce waste, and meet supply chain requirements. Includes gap assessment, implementation, and audit guidance.

A complete guide to ISO/IEC 27017 — the international code of practice for cloud security controls. Learn how cloud providers and customers use ISO 27017 to manage shared responsibility and demonstrate cloud security assurance.

Everything organisations need to know about GDPR compliance — the six principles, lawful bases, data subject rights, controller and processor obligations, DPIA requirements, breach notification, and building a sustainable compliance program.

A complete guide to Nigeria's Data Protection Act 2023 — how it evolves from NDPR, the new NDPC regulator, enhanced data subject rights, and what organisations must do to transition their compliance programs.

A comprehensive guide to ISO/IEC 27001 — the global standard for information security management systems. Learn what it covers, who needs it, how to build an ISMS, what the certification audit involves, and how to maintain certification year after year.

A complete guide to HITRUST CSF certification — what the Common Security Framework covers, the three assurance levels (e1, i1, r2), how to prepare for assessment, and why HITRUST is the gold standard for healthcare vendor assurance.

Everything you need to know about NIST CSF 2.0 — the six functions, how to conduct a CSF assessment, build a target profile, prioritise improvements, and use the framework for board-level risk communication.

A complete guide to NIST SP 800-171 Rev 3 — the 110 security requirements for protecting CUI in non-federal systems, how they map to CMMC, the self-assessment process, and how to close gaps before your next DoD contract.