Cyberday

30/07/2026

Attention, everyone, ISOs coming through! 📣

We are pleased to once again present three new frameworks in Cyberday 🛡️ Cyberday now offers management tool for ISO 22301 and ISO 14001, and in addition we've brought Norway's Normen for healthcare sector 🩺

🇳🇴 Normen is common information security framework for the Norwegian health and care sector, giving organizations' a shared approach to protecting sensitive health information: https://eu1.hubs.ly/H0xjpW20
🔄 ISO 22301 is the international standard for business continuity, providing a structured framework for identifying critical business activities, understanding the impact of disruptions, preparing response plans and continually improving organization: https://eu1.hubs.ly/H0xjq5R0
🍀 ISO 14001 helps organizations of all sizes to identify environmental impacts, manage risks, meet compliance obligations and continuously improve their environmental performance: https://eu1.hubs.ly/H0xjpSf0

What framework should be supported next?

07/07/2026

Imagine the situation.
Audit day is fast approaching.
Where's the latest risk assessment? Is it actually up to date?
The information security policy is in drive i think... but how do we show that employees have read and acknowledged it?
We had a few staff changes this year. Who was responsible for user access reviews now?
We switched to a new authenticator tool. Has the related process documentation been updated?
And didn't the last audit identify a nonconformity? Was that ever closed out?

If answering those questions means digging through emails, folders and spreadsheets, the real problem isn't the audit. It's that compliance isn't being managed.

A management system (like Cyberday) doesn't just store documents. It brings together responsibilities, risks, policies, evidence and continuous improvement into one structured way of working. That means less time chasing information, fewer surprises during audits, and compliance that stays current all year round.

Want to read more on the topic? 📝

A management system helps organizations address compliance in a systematic, consistent manner with the support of automated processes. The system ensures that the work is continuous and documented, and supports compliance efforts.

07/07/2026

Most security risk discussions miss the one thing that truly creates clarity: a defined target risk level. 🛡️

If every risk is labeled simply “high” or “medium,” conversations stay abstract. But when you use a clear numeric scale and agree on your organization’s acceptable risk level, the discussion becomes practical. The focus shifts from “Is this risky?” to “What actions reduce this risk to an acceptable level?”

That’s when risk management stops being just documentation and starts guiding real security priorities and decisions.

Read the full article → https://eu1.hubs.ly/H0s40Px0

Clear, practical explanation of information security risk management, how it connects to security frameworks, and how to make risk-based security work in practice.

19/06/2026

Translator Scandinavia AB turned security work into a manageable system with clear structure, continuous guidance, and extensive support from Cyberday every step of the way.

Instead of juggling requirements alone, they built a sustainable way of working where compliance and information security actually make sense.

Curious how Cyberday helped make it happen?

👉 Read the success story:
https://eu1.hubs.ly/H0rkq5Q0

12/06/2026

"What should I focus on next?"
As organizations build their security management, information often ends up scattered across tasks, reports, documents, and different views. Finding everything related to a single topic can become harder than the work itself. That's why we're introducing workflows.

Workflows bring everything related to a specific topic into one place: risk management, employee awareness, incident management, asset management, supplier management, or even internal audits.

With workflows, you can:
✅ See the metrics that matter
✅ Understand blockers and next steps
✅ Access related tasks, reports, and documentation instantly
✅ Maintain security work through clear, ongoing processes

Read more about Workflows: https://eu1.hubs.ly/H0w5n0K0

29/05/2026

Both EU AI Act and ISO 42001 available in Cyberday! 🤖

The EU AI Act and ISO 42001 are often discussed together, but they serve different purposes.

🇪🇺 The EU AI Act is a legal framework that defines what organizations must do to use AI responsibly and comply with regulation.
📋 ISO 42001 is a voluntary management system standard that helps organizations build structured AI governance processes.

The good news? They overlap significantly in areas like risk management, documentation, human oversight, transparency, and accountability. ISO 42001 can provide a strong foundation for meeting many EU AI Act requirements, but certification alone does not guarantee compliance.

Read the full article → https://eu1.hubs.ly/H0vLsG80

EU AI Act vs ISO 42001: learn the key differences, where they overlap, and how to use both to build practical, compliant AI governance.

21/04/2026

How does ISO 27001 support GDPR?

Many teams treat them separately but they actually work well together. GDPR defines what’s required & ISO 27001 shows how to manage it.

ISO 27001 doesn't fully cover GDPR, but with ISO 27001, you build a structured ISMS to:

🔄 Manage risks continuously
🔍 Implement and monitor controls
🏆 Prove accountability

How are you handling this?

Read the full article →

In this blog, we'll quickly go over ISO 27001 standard and GDPR, look at their similarities, and discuss how ISO 27001 can be useful towards GDPR compliance. We will also take a peek to GDPR and ISO 27701 cooperation.