role. I am stepping forward to contribute openly and responsibly, bringing global experience, local understanding, and a deep commitment to service. Not for titles, but to help build safer, stronger, and more future-ready communities for the next generation.
You cannot create real impact by staying in the background. Progress requires people who care enough to step forward and take responsibility.
After nearly two decades living and working in the UK, and building international experience in cybersecurity and risk managementโฆ
I have seen what strong systems, accountability, and people-centred leadership can achieve. That exposure has shaped my values and my belief that our communities deserve better.
After years of observing, learning, and contributing quietly, I have chosen to take a more visible
๐จ Cybersecurity Learners Alert! ๐จ
If youโre preparing for CompTIA Security+ Certification, Iโve got something special for you.
My hands-on courses are designed to get you job-ready โ not just certified.
To appreciate my growing cybersecurity community, Iโll be sharing FREE CompTIA Security+ practice exam questions right here!
Courtesy: @LinkedIn
This is ALL you have to do:
1๏ธโฃ Follow me
2๏ธโฃ Repost this so others can benefit
3๏ธโฃ Comment โPracticeโ below โ Iโll send you the free questions directly in your DM!
Letโs grow together and build your cybersecurity journey the right way.
#CyberSecurity #SecurityPlus #SOC #GRC #CyberCommunity #CompTIA
@MISSTEEcal@oprahmo Info already in the public domain anyways, if at this point in time people refuse to take their privacy seriously, till they learn the hard wayโฆDMed as per what lol
UNDERSTANDING THE ISO 27001 CLAUSES AND THEIR MEANING
To further understand it as a beginner, you need to know that the clauses are different from controls. The clauses and subsections underneath it are explained to help you understand the specific requirements of that clause, more like a practical guide. which I'll explain later.
ISO 27001 has two parts:
Clauses 4โ10: These are the management system requirements (what you must do to run an ISMS).
Annex A controls: These are the safeguards you can apply to situations that need a control implemented for them.
Think of the clauses as the โproject planโ for building and maintaining information security in an organization.
NEXT STEP
I broke down each aspect of the clauses into a more beginner-friendly explanation
Clause 4: Context of the Organization:
Meaning: Understand your organization, executive members, stakeholders, and what information you need to protect.
Practical Example: A hospital needs to protect patient data, while a bank must secure customer financial records from being accessed by hackers or anyone else.
Clause 5: Leadership
Means: Top management must commit to information security and other important activities in the organization.
Practical Example: The CEO approves the ISMS policy and allocates a budget for cybersecurity training or any other activities in the organization.
Clause 6: Planning
What it means: Identify risks, set objectives, and plan treatment for risks identified in the organization.
Practical Example: Running a risk assessment on cloud systems, then deciding to encrypt sensitive files to mitigate, or putting measures in place to take care of identified risks.
Clause 7: Support
What it means: Provide resources, finance, training, and awareness.
Practical Example: HR ensuring staff attend phishing awareness sessions, or IT buying updated antivirus software.
Clause 8: Operation
What it means: Put your security plans into action. Now you're thinking about what to do to improve your information system.
Practical Example: Implementing Access Controls to Restrict Payroll Files to HR Only
Clause 9: Performance Evaluation
What it means: Monitor, measure, audit, and review organizational or employee performance (KPI).
Practical Example: Conducting quarterly security audits and management reviews to see if controls are working.
Clause 10: Improvement
What it means: Fix issues and make the system better.
Practical Example: After a phishing incident, update the awareness program and tighten email security filters, or after a data breach, improve encryption methods.
FINALLY
Clauses (4-10) provide the structure to run security as a business process in the most effective way possible.
Annex A controls are the tools you select based on the risks identified in your business or organization. Together, they ensure information is managed securely, continuously improved, and aligned with business needs.
#ISO27001 #GRC #Cybersecurity
ISO 27001 BREAKDOWN IN A BEGINNER-FRIENDLY WAY
In my last class, I spent over an hour breaking down ISO 27001 to my GRC students, but I noticed it started to feel a bit overwhelming for some. So, I simplified it this way:
๐ ISO 27001 is like a rulebook that organizations follow to protect their information systems. Its ultimate goal is to safeguard the Confidentiality, Integrity, and Availability (CIA) of data.
To make it more relatable, I used this everyday analogy:
Imagine you move into your newly completed house without a gate and, unfortunately, a robbery takes place. You donโt want that to happen again, so what measures would you put in place? Maybe build a fence, install a stronger gate, add electric wires, or even hire a security guard. Each of these actions is a control โ a safeguard to reduce risk and prevent another robbery attack. Thatโs exactly what Annex A controls are in ISO 27001.
I then explained that controls can be grouped into three categories:
Administrative (policies & rules)
Example: A rule requiring everyone to use strong passwords.
Technical (technology-based)
Example: Firewalls, antivirus software, or multi-factor authentication.
Physical (real-world protections)
Example: Locking server rooms, using ID badges, or CCTV cameras.
Using more everyday examples helps too:
A password policy = locking your house with a strong key.
Access control = only housemates have a key, not strangers.
Backups = making a photocopy of an important document.
Incident response = calling the fire department when thereโs a fire outbreak.
So in essence, ISO 27001 is all about providing structured rules and safeguards to help organizations keep their data and systems secure.
Weโll continue from here in our next class, but I hope this recap makes ISO 27001 a lot clearer for any beginner trying to understand it.
๐ฃ๐ฎ๐ถ๐ฑ ๐๐ผ๐๐ฟ๐๐ฒ ๐๐ฅ๐๐ (PART - 1)
1. Artificial Intelligence + Data Analyst
2. Machine Learning + Data Science
3. Cloud Computing + Web Development
4. Ethical Hacking + Hacking
5. Data Analytics + DSA
6. AWS Certified + IBM COURSE
7. Data Science + Deep Learning
8. BIG DATA + SQL COMPLETE COURSE
9. Python + OTHERS
10 MBA + HANDWRITTEN NOTES
(72 Hours only ) Cost About - $500
To get FREE: -
1. Follow (So I can DM you)
2. Like & retweet
3. Reply " Send "