Information Security Controls Checklist per ISO/IEC 27001:2022

SMEs are frequent targets of ransomware and data-theft attacks, often with more severe consequences than large enterprises because they lack the resources to recover quickly. This 100-question checklist helps SMEs systematically audit their security posture across policy, infrastructure, and people, identify gaps, and put in place the controls needed to reduce the risk of compromise.

30 Actions Vietnamese Businesses MUST Take to Comply with the 2025 Cybersecurity Law - Law No. 116/2025/QH15

Insider activity is one of the leading causes of data-leak incidents - through privilege abuse, unauthorized copying, or employees taking data with them when they leave. This checklist helps organizations identify weaknesses in HR-related data governance, assess the current state, and put in place controls that prevent leaks from inside the organization. It's particularly relevant for businesses that collect, store, and process customer data - especially in finance, technology, real estate, and e-commerce - for HR, IT, and InfoSec teams that need to jointly build internal-control policies, and for organizations preparing to comply with Vietnam's Decree 13/2023/NĐ-CP on personal-data protection.