Essential Eight Meets ISO 27001: An Indicative Control Map for Australian SaaS TeamsIf you sell software in Australia, your customers may ask about the Essential Eight, the Australian Signals Directorate's baseline of eight mitigation strategies (cyber.gov.au). Overseas buyers ask ab19h ago · 3 min readsis-cert.hashnode.dev
ISO 27001 Certification for Ethiopian Software and Fintech Teams: What the Auditor Tests in Stage 2A prospect's security team sends a vendor questionnaire. Between the questions on encryption and access control is a short, blunt one: Do you hold ISO 27001? What is its scope? When was your last rest1d ago · 5 min readsis-cert.hashnode.dev
Shipping Software from Addis Ababa: An ISO 27001, SOC 2 and CMMI Roadmap for Ethiopian Tech TeamsThe Security Review Is the New Sales Call Mobile payments, telecom competition and outsourcing are growing quickly in Ethiopia. Every international client now sends a security questionnaire before the2d ago · 4 min readsis-cert.hashnode.dev
Building for Ethiopia? What the Data Protection Proclamation Means for Your Codebase (and How ISO 27701 Helps)If you build software that handles people's data in Ethiopia, the rules changed in 2024. The Personal Data Protection Proclamation No. 1321/2024 came into force on 24 July 2024, and it places duties o6d ago · 3 min readsis-cert.hashnode.dev
ISO 27701 Certification for Developers: Build Privacy into the Data Layer (GDPR and DPDP Ready)The ticket looks simple: "User X has asked us to delete their data." Then the questions start. Which databases hold their records? Did the analytics export copy them? Does the support tool have their Oct 23 · 8 min readsis-cert.hashnode.dev