Tidal Control incident
ISO 27001 reference guide: complete overview of requirements and implementation
Resolved on September 30, 2025.
ISO 27001 requires organisations to meet clauses 4-10 covering context, leadership, planning, support, operation, evaluation, and improvement, plus implement between 60 and 93 controls from Annex A. Certification involves a two-phase audit: a one-day document review in Phase 1 and a two-day implementation assessment in Phase 2. Common failures include procedures that do not match reality and employees unaware of their responsibilities. The resulting certificate is valid for three years, with annual surveillance audits of approximately one day each.
Update timeline
- resolved Sep 30, 2025, 12:00 AM UTC
ISO 27001 requires organisations to meet clauses 4-10 covering context, leadership, planning, support, operation, evaluation, and improvement, plus implement between 60 and 93 controls from Annex A. Certification involves a two-phase audit: a one-day document review in Phase 1 and a two-day implementation assessment in Phase 2. Common failures include procedures that do not match reality and employees unaware of their responsibilities. The resulting certificate is valid for three years, with annual surveillance audits of approximately one day each.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services