Brivellis Insights https://brivellis.com/insights/ Practical insights on IT Service Management, Cybersecurity & Compliance, Business Resilience and Governance & Risk, for teams worldwide. en Tue, 27 Oct 2026 00:00:00 GMT BIA and RTO/RPO: the numbers IT cannot set alone https://brivellis.com/insights/bia-rto-rpo-business-continuity/ How a business impact analysis sets the MTPD, RTO and RPO, why IT cannot set them alone, and how one number should run from the BIA to the exercise report. Business Resilience Tue, 27 Oct 2026 00:00:00 GMT https://brivellis.com/insights/bia-rto-rpo-business-continuity/ NIST CSF 2.0 explained: how to answer it from the ISO/IEC 27001 system you already run https://brivellis.com/insights/nist-csf-2-0-iso-27001-one-system/ NIST CSF 2.0 in plain terms: the six functions, what changed in version 2.0, and how an ISO/IEC 27001 ISMS answers it without a second control set. Cybersecurity & Compliance Mon, 26 Oct 2026 00:00:00 GMT https://brivellis.com/insights/nist-csf-2-0-iso-27001-one-system/ ISO/IEC 27090 is out: how the new AI security standard fits with ISO/IEC 42001 https://brivellis.com/insights/iso-27090-ai-security-iso-42001/ ISO/IEC 27090:2026 gives guidance on AI-specific security threats. Here is how it differs from ISO/IEC 42001 and how to use the two together. Cybersecurity & Compliance Wed, 21 Oct 2026 00:00:00 GMT https://brivellis.com/insights/iso-27090-ai-security-iso-42001/ How to implement ISO/IEC 27001:2022: the seven ISMS documents to build first, in order https://brivellis.com/insights/iso-27001-implementation-steps-isms/ ISO 27001 implementation, step by step: the seven ISMS documents to build first, the order that works, and how risk, controls and evidence stay linked. Cybersecurity & Compliance Mon, 19 Oct 2026 00:00:00 GMT https://brivellis.com/insights/iso-27001-implementation-steps-isms/ How to build a security awareness programme: a 12-month plan, step by step https://brivellis.com/insights/security-awareness-programme-12-month-plan/ Build a security awareness programme in six steps: policy, audiences, a 12-month plan, phishing simulation rules, one register and a few measures. Cybersecurity & Compliance Mon, 12 Oct 2026 00:00:00 GMT https://brivellis.com/insights/security-awareness-programme-12-month-plan/ Security awareness that auditors accept: the evidence behind ISO/IEC 27001 and NIST CSF 2.0 https://brivellis.com/insights/security-awareness-audit-evidence/ Training alone does not pass an audit. The five pieces of security awareness evidence that satisfy ISO/IEC 27001 A.6.3 and NIST CSF 2.0 PR.AT. Cybersecurity & Compliance Tue, 06 Oct 2026 00:00:00 GMT https://brivellis.com/insights/security-awareness-audit-evidence/ Resilience is an executive capability https://brivellis.com/insights/executive-resilience/ Why recovery plans are not enough, and how leaders can make resilience part of everyday technology governance. Business Resilience Sat, 01 Aug 2026 00:00:00 GMT https://brivellis.com/insights/executive-resilience/ Responsible AI begins with operating clarity https://brivellis.com/insights/responsible-ai-clarity/ The essential decisions organizations need before AI pilots become scaled capability. Governance & Risk Sat, 01 Aug 2026 00:00:00 GMT https://brivellis.com/insights/responsible-ai-clarity/ Why technology transformations lose momentum https://brivellis.com/insights/transformation-momentum/ Five patterns that quietly separate ambition from execution—and the leadership moves that reconnect them. Governance & Risk Sat, 01 Aug 2026 00:00:00 GMT https://brivellis.com/insights/transformation-momentum/