# ISO 27001 Published articles for ISO 27001. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Trust you can verify: Figma is now ISO 42001 certified DevFeed: [Trust you can verify: Figma is now ISO 42001 certified]() Original publisher: [Read original article]() Author: Tushar Badlani Published: 2026-07-01T12:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [ai-governance](), [Figma](), [responsible-ai](), [Security]() Tags: [ai](), [ai-governance](), [figma](), [iso](), [iso-27001](), [responsible-ai](), [security](), [soc-2]() ### AI overview Figma announces ISO/IEC 42001:2023 certification for its Artificial Intelligence Management System. An accredited independent auditor assessed Figma's AI governance policies, risk management processes, data practices, development practices, and technical safeguards across its platform. ### Source excerpt Saying you use AI responsibly is easy, but proving it to an accredited auditor is harder. We decided that was a standard worth meeting. ## Pulumi ships a 238-policy ISO/IEC 27001:2022 pack for AWS DevFeed: [Pulumi ships a 238-policy ISO/IEC 27001:2022 pack for AWS]() Original publisher: [Read original article]() Author: Dan Biwer Published: 2026-06-30T00:00:00Z Content type: release Language: en Sources: [Pulumi]() Topics: [Amazon Web Services](), [Security](), [Cloud](), [configuration]() Tags: [audit](), [aws](), [compliance](), [crossguard](), [features](), [governance](), [infrastructure](), [iso](), [iso-27001](), [policy](), [policy-as-code](), [product](), [pulumi](), [pulumi-cloud](), [security](), [standard]() ### AI overview Pulumi announces a pre-built ISO/IEC 27001:2022 policy pack for AWS, available in Pulumi Cloud as iso-27001-aws. The pack contains 238 policies mapped to relevant ISO 27001 controls and supports auditing existing AWS resources and preventing non-compliant resources during pulumi up. ### Source excerpt ISO/IEC 27001 is the international standard for information security management. Proving you meet it usually means months of mapping abstract security controls to concrete cloud configuration, then authoring custom checks one resource at a time. We're changing that. Today we're shipping a pre-built ISO/IEC 27001:2022 policy pack for AWS, live now in Pulumi Cloud as iso-27001-aws. It encodes the standard's security expectations as 238 ready-to-run policies, so you can align your AWS estate to ISO 27001 in minutes, not months. Why ISO 27001 matters For many companies, ISO 27001 is what stands between them and a customer or a market. The sooner you can reach a certifiable state and prove you stay there, the less compliance slows the business down. The pack collapses months of policy work into something you run continuously, so security keeps pace with growth instead of blocking it. How the pack maps to ISO 27001 The hard part of ISO 27001 has always been translation: its controls are written in the language of governance and risk management, not in the language of AWS resources. Every team has had to interpret each control and decide what it means for an S3 bucket or an RDS instance. The pack does that interpretation for you. Its 238 policies are aligned to the relevant ISO 27001 controls, so each result connects back to the standard instead of leaving you to map it yourself. You can browse the full pack in the pack reference. Audit and prevent The same pack works two ways, so you can both reach compliance and stay there: Audit. Scan your existing AWS estate against the pack, including resources that Pulumi doesn't manage. You get an honest baseline of where you stand against ISO 27001 today, with every finding tied back to the control it affects. Prevent. Run the same pack as a preventative policy during pulumi up to block non-compliant resources before they're ever created. New infrastructure is born aligned to the standard. Audit gets you clean. Preventative policie ## EU AI Act Compliance: Requirements, Risks, and What to Document DevFeed: [EU AI Act Compliance: Requirements, Risks, and What to Document]() Original publisher: [Read original article]() Author: info@goteleport.com (Kayne McGladrey, CISSP) Published: 2026-04-15T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Artificial Intelligence](), [Requirements](), [Documentation](), [audit](), [data-governance](), [Logging](), [Monitoring](), [Deployment](), [data]() Tags: [ai](), [compliance](), [cybersecurity](), [data](), [data-governance](), [dataset](), [deployment](), [development](), [documentation](), [eu](), [iso-27001](), [lifecycle](), [logging](), [monitoring](), [nist](), [real-time](), [reproducibility](), [soc-2](), [versioning]() ### AI overview A practical guide to EU AI Act compliance covering requirements, risks, technical documentation, logging, data governance, lifecycle evidence, traceability, monitoring, and human oversight. It outlines key compliance milestones from August 2025 through August 2027. ### Source excerpt Cut through EU AI Act complexity with practical guidance on requirements, risks, and documentation. ## Latacora Achieves AWS Advanced Tier Services Partner Status DevFeed: [Latacora Achieves AWS Advanced Tier Services Partner Status]() Original publisher: [Read original article]() Published: 2026-01-27T21:00:00Z Content type: release Language: en Sources: [Latacora]() Topics: [Amazon Web Services (AWS)](), [Security & compliance, Cloud security](), [Security](), [AWS IAM](), [Monitoring](), [threat detection]() Tags: [amazon-web-services-aws](), [cloud-security](), [compliance](), [iam](), [iso-27001](), [monitoring](), [security](), [soc](), [soc-2](), [threat-detection]() ### AI overview Latacora announces that it has achieved Amazon Web Services (AWS) Advanced Tier Services Partner status within the AWS Partner Network. The company says the designation reflects validated technical expertise, AWS-certified professionals, and a proven record of customer success in cloud security and compliance. ### Source excerpt We are thrilled to announce a major milestone for Latacora: we have achieved the Amazon Web Services (AWS) Advanced Tier Services Partner status within the AWS Partner Network (APN). This designation reflects Latacora's technical expertise and diligence in delivering exceptional cloud security and compliance solutions to our clients, and confirms that we have successfully completed a rigorous validation process demonstrating a proven track record of customer success delivered by a team of AWS-certified professionals with specialized technical capabilities. ## Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster DevFeed: [Simplify Continuous Compliance: How to Stay Audit-Ready and Ship Software Faster]() Original publisher: [Read original article]() Published: 2025-10-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Application Security](), [open-source-security](), [Open Source](), [Software](), [chainguard]() Tags: [chainguard](), [chainguard-containers](), [chainguard-security](), [cmmc](), [compliance](), [cves](), [fedramp](), [iso-27001](), [open-source-software](), [pci-dss](), [security](), [soc-2](), [stateramp]() ### AI overview This article explains how organizations can treat software compliance as a continuous practice rather than a periodic audit exercise. It describes how open-source components, CVE remediation, provenance, SBOM coverage, and audit evidence affect platform engineering, application security, development velocity, and regulated-market access, while presenting Chainguard as a solution provider. ### Source excerpt Turn compliance into a growth driver with Chainguard. Eliminate CVEs, stay audit-ready, and meet FedRAMP, SOC 2, and ISO 27001 with secure images. ## ISO 27001:2022 Requirements Explained DevFeed: [ISO 27001:2022 Requirements Explained]() Original publisher: [Read original article]() Author: jackson.pitts@goteleport.com (Jack Pitts) Published: 2025-08-13T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Requirements](), [audit](), [Security](), [Software as a service](), [sensitive data]() Tags: [audit](), [certifications](), [compliance](), [iso](), [iso-27001](), [migration](), [requirements](), [scope](), [security](), [sensitive-data]() ### AI overview This article explains the requirements of ISO/IEC 27001:2022, including its Information Security Management System framework, changes from the 2013 edition, certification migration, formal clauses, and Annex A controls. It describes how organizations can prepare for audits and certification. ### Source excerpt Learn about ISO 27001:2022 requirements. ## Neon is HIPAA Compliant DevFeed: [Neon is HIPAA Compliant]() Original publisher: [Read original article]() Author: Busra Demir Published: 2025-03-13T16:17:42Z Content type: article Language: en Sources: [Blog -- Neon Docs]() Topics: [Database](), [Security](), [Authorization](), [Encryption](), [Incident response](), [Monitoring](), [Shared Responsibility Model](), [Software as a service]() Tags: [access-control](), [company](), [compliance](), [database](), [encryption](), [hipaa](), [incident-response](), [iso-27001](), [logging](), [monitoring](), [product](), [security](), [security-best-practices](), [shared-responsibility](), [soc-2]() ### AI overview Neon announces completion of its HIPAA compliance audit, enabling customers to store Protected Health Information (PHI) on its database platform. The article describes safeguards including encryption, role-based access control, audit logging, continuous monitoring, incident response, breach notification, employee training, third-party requirements, and shared customer responsibilities. ### Source excerpt Neon has completed its HIPAA compliance audit, adding to our security achievements: SOC 2 Type 2, ISO 27001, ISO 27701, GDPR, and CCPA. If your company needs a HIPAA-compliant database, Neon can now securely store Protected Health Information (PHI). What is HIPAA Compliance? The... ## Improving Laravel Application Security with Aikido DevFeed: [Improving Laravel Application Security with Aikido]() Original publisher: [Read original article]() Author: James Brooks Published: 2024-07-08T14:30:00Z Content type: news Language: en Sources: [Laravel Blog]() Topics: [Laravel](), [Application Security](), [Vulnerabilities](), [PHP](), [cloud security]() Tags: [application-security](), [cloud-security](), [hipaa](), [integration](), [iso-27001](), [laravel](), [php](), [scanners](), [security](), [security-vulnerabilities](), [soc2]() ### AI overview Laravel has partnered with Aikido to add security scanning for Laravel applications using Forge. The integration identifies potential vulnerabilities and security flags, surfaces findings within Forge, and combines code and cloud security scanners to help developers manage application security and compliance requirements. ### Source excerpt As your Laravel application grows, managing security objectives becomes more challenging, especially for small teams or solo developers. Today, Laravel has teamed up with Aikido to provide a seamless solution for securing your Laravel application. With Aikido, Laravel developers using Forge can effortlessly scan for and identify potential security vulnerabilities, all in less than 1 minute. ## Introducing Chainguard's Trust Center DevFeed: [Introducing Chainguard's Trust Center]() Original publisher: [Read original article]() Published: 2024-05-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [supply-chain-security](), [chainguard images](), [soc 2]() Tags: [audit](), [certifications](), [chainguard](), [compliance](), [iso-27001](), [nist](), [security](), [slsa](), [soc](), [soc2](), [software-security-audit](), [software-security-best-practices](), [software-supply-chain](), [software-supply-chain-security](), [trust-center]() ### AI overview Chainguard introduces its Trust Center, a platform that centralizes security, compliance, and privacy information for users and customers. The center provides access to independent penetration-testing assessments, a SOC 2 Type 2 audit report, hardening guidance, privacy information, data-subprocessor details, and information security policies. ### Source excerpt Learn how Chainguard prioritizes security with our new Trust Center. Find info on our policies, certifications, and how we protect your software supply chain. ## Teleport Achieves ISO 27001, HIPAA, and SOC 2 Compliance Milestones DevFeed: [Teleport Achieves ISO 27001, HIPAA, and SOC 2 Compliance Milestones]() Original publisher: [Read original article]() Author: reed@goteleport.com (Reed Loden) Published: 2023-08-11T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [soc 2 compliance](), [soc 2](), [Security](), [trust](), [Software as a service](), [Availability]() Tags: [availability](), [compliance](), [hipaa](), [iso-27001](), [saas](), [security](), [soc-2](), [soc-2-compliance](), [trust]() ### AI overview Teleport announces ISO 27001 certification, HIPAA compliance, and an expanded SOC 2 Type II report covering the Confidentiality and Availability trust service criteria. ### Source excerpt An overview of Teleport Achieved ISO 27001, HIPAA, and SOC 2 Compliance Milestones