deGRANDSON Global Blog

News and Commentary on ISO Management System Standards

26 Feb 2026

Measuring Effectiveness with ISO 27004

On this topic, ISO 27001 provides no guidance and is of little help. In deciding what to monitor and measure regarding your Information Security Management System (ISMS), ISO 27001 specifies no mandatory requirements (as emphasized in our ISO 27001 training courses). Thankfully, ISO 27004 provides guidelines and principles for measuring and reporting the effectiveness of an organization's ISMS. ...

16 Dec 2025

Cybersecurity for Medical Devices

ISO 13485, ISO 27001

QMSR & ISO 13485: On 02-Feb-26, the FDA Final Rule comes into force. The amendments incorporate by reference (and so align more closely with) the international standard ISO 13485:2016, Medical Devices - Quality Management Systems - Requirements for regulatory purposes. Did you know that cybersecurity is addressed in ISO 13485:2016, Clause 7.3? Whether you are marketing a Medical Device ...

22 Aug 2025

[Video] deGRANDSON Global Courses explainer

ISO 27001

09 Jan 2025

Evidence for ISO 27001 Annex A compliance

ISO 27001

Demonstrating compliance with Annex A requirements of Annex A to your Certification Body Using ISO 27001 controls outlined in Annex A alone to address security vulnerabilities is never enough!

News and Commentary on ISO Management System Standards

Measuring Effectiveness with ISO 27004

Cybersecurity for Medical Devices

[Video] deGRANDSON Global Courses explainer

Evidence for ISO 27001 Annex A compliance

Subscribers get a 10% Discount

Posts by Tag

Courses

FAQs

Other Information

Contact Information