Practical, no-fluff writing on vendor risk, SOC 2, ISO 27001, continuous monitoring and getting audit-ready.
A plain-English overview of the four Annex A control themes in the ISO 27001:2022 revision and how to approach implementation.
The questions that matter when assessing a vendor for SOC 2, organised by domain — plus a free, importable questionnaire template.
A practical, step-by-step guide to standing up a vendor risk management program — from building a vendor register to continuous monitoring.
Complyzing automates vendor risk, monitoring and audit evidence — start free.