AI red teaming vs penetration testing: what is the difference?
An AI application can pass a penetration test and still be manipulated through perfectly normal use. That is why red teaming has become the reference security test for AI systems
Blog
We use this place to discuss random subjects. You may find some of them interesting...
What is ISO/IEC 27090? AI security, explained
AI systems can be attacked in ways conventional cybersecurity was never designed to catch. ISO/IEC 27090, published in 2026, is the international guidance for addressing them — here is what it covers and who should read it.
AI provider, AI producer or AI user: the roles that shape an ISO/IEC 42001 implementation
Provider, producer or user? The role an organization plays in the AI ecosystem decides what its ISO/IEC 42001 management system must cover. An auditor’s guide to the roles defined in ISO/IEC 22989, with examples.
Quality culture and ethical behavior in ISO 9001:2026. What the new standard requires.
ISO 9001:2026 asks top management to promote a quality culture and ethical behavior. An auditor's view on what the requirement means, what evidence counts, and what it does not ask for.
ISO 9001:2026 is here: What's new and how to prepare for the transition
ISO 9001:2026 has been published, replacing the 2015 edition. It's an evolution, not a revolution — here is what you need to know
AI bias. Understanding where it comes from and why it matters
AI bias rarely comes from anyone intending it. Learn where it actually comes from — in the data and the design — and why it's so hard to spot.
What happened to climate change?
In 2024, ISO swept climate change into every management system standard. By 2026, ISO 14001 treats it as just another item in a list. What changed, and what does it tell us?
ISO 14001:2026. A quick set-up guide
You have been required to coordinate the implementation of an environmental management system according to ISO 14001:2026 in your organization. Where should you start? What should you do? Here are some suggestions
I use AI everyday, but I would never make a 100% AI course
AI makes content creators more efficient. But there is a difference between using AI as a tool and letting it replace you entirely — and that difference matters for learners.
Upcoming ISO 19011:2026 – What will change in management system auditing?
What is new in the 2026 edition of ISO 19011, the guidance standard for management system audits. What auditors should know and how auditing is evolving.
Human resources security: key aspects every organization should address
People are the most significant information security risk in any organization. Here is what effective HR security looks like — from background checks to termination.
CISA vs ISO/IEC 27001 auditor: What information security professionals should know
CISA and ISO/IEC 27001 are not the same thing — and understanding the difference matters for every information security professional
How to prepare for an ISO auditor certification exam
29 questions. 55 minutes. One certification. Here is how to prepare for the RIGCERT Education ISO auditor exam — and what to watch out for.
Remote auditing: what it is, why it matters, and what every auditor should know
Remote auditing is here to stay. Here's what every auditor needs to know
ISO/IEC 27701 and GDPR: How do they relate?
ISO/IEC 27701 and the GDPR are closely related — but they are not the same thing. One is a law. The other is a framework. Here is how they connect.