BLOG

Welcome to the STANDARDISO blog. We write about ISO standards, business efficiency and new practices that help companies grow and work to international standards. Whether you run a small business or a large corporation, you will find practical advice, analysis and guidance to help you improve how you work.

What the CrowdStrike incident taught us about information security

In July 2024 a faulty update to CrowdStrike’s security software crashed about 8.5 million Windows computers. What it teaches about change management, supplier dependence and ISO 27001...

The GDPR in the IT industry — who it applies to and how to comply

Who the GDPR applies to, what it requires of IT companies and what compliance looks like — and why ISO 27001 and ISO/IEC 27701 help without replacing it...

ISO 41001 — the standard for facility management

ISO 41001 treats facility management as a management system: maintenance, energy, security, cleaning and contracts with service providers. What it covers and how it is implemented...

ISO/IEC 42001 — AI management systems

ISO/IEC 42001:2023 is the first management system standard for AI: what it requires, who needs it, how it differs from ISO 27001 and what the EU AI Act means in Serbia...