• English
  • العربيةSoon
  • FrançaisSoon
  • DeutschSoon
  • 中文Soon
  • 日本語Soon

Insights

Notes from the audit floor: what standards actually require, where implementations usually fail, and what changed in the frameworks you have to answer to.

Channel 01

ZULTIV Blogs

Written here, by the people who deliver the audits and the training.

Reading a Statement of Applicability the way an auditor does

Most SoAs are written to be filed, not read. Here is what a lead auditor checks first, and the three inconsistencies that show up almost every time.

In preparation

Your vendor's ISO certificate does not cover what you think it does

Scope statements are where supplier assurance quietly falls apart. A short guide to reading one properly before you accept it as evidence.

In preparation

Channel 02

Medium Articles

Longer-form writing published on Medium, for readers who want the full argument rather than the summary.

Channel 03

LinkedIn Articles

Short, current commentary published to our LinkedIn audience, usually within days of a standard, ruling or breach becoming relevant.

Channel 04

Guest Articles

Writing contributed by practitioners outside ZULTIV, and pieces our team has published in other outlets.

Contributions from the field

Guest pieces from CISOs, DPOs, internal audit leads and certification-body auditors on what they see going wrong, and what they wish clients knew earlier.

Publishing soon

Write for ZULTIV

If you work in security, privacy, AI governance, quality or continuity and you have something specific to say, we will publish it and credit you properly.

Need help implementing or evidencing a requirement?

Reading about a clause is one thing. Evidencing it in front of an auditor is another. That is the part we do.