When you are a cyber security leader, when you are accountable for cyber security across your organisation, what keeps you awake at night? Is it the latest zero-day vulnerability, the fear of data loss due to poor user behaviours, perhaps its wondering if your latest product release is really as secure as you are being told?

For years and indeed to this day cyber security teachings and almost all certification exams pose the following question: What is the most important element to a successful cyber security function? Answer: Senior Management Support.

TEMPEST OR STORM IN A TEACUP?

The constellation of Orion the Hunter has long been pivotal in human mythology. In particular Orion’s Belt are three stars easily visible to the naked eye. More than one creation myth surrounds it.

Nobody doubts that ISO 27001 is a great blueprint for information security management and goes a long way towards codifying industry standards. But, as a set of specifications last updated in 2017, does it still really inform best practice?