Ronald Williams
CEO
Senior QSA, lead auditor, multi-framework engagement governance.
INSIGHTS
Practitioner insights from our consultants.
Field commentary, case studies, and news from 1 Sequence Cyber’s QSAs, Penetration Testers, and lead auditors.
INSIGHTS
Practitioner insights from our consultants.
Field commentary, case studies, and news from 1 Sequence Cyber’s QSAs, Penetration Testers, and lead auditors.
WHO WRITES HERE
Practitioner-led editorial.
Every article is by-lined by a working consultant — QSAs, lead auditors, Penetration Testers — not a marketing team.
J Sebastian
CTO, Director of Operations
Platform architecture & technical strategy.
Stephen Hancock
Principal QSA
PCI DSS QSA, ROC reporting, SAQ assessment.
Sujith MP
Director of Professional Services
PCI DSS, ISO 27001, multi-framework engagement delivery.
TOPICS WE’LL COVER
Source-cited explainers across the compliance stack.
Each article is mapped to a published framework — PCI SSC, ISO/IEC, AICPA, NIST. Citations are page-and-version specific.
PCI DSS
Card data security for merchants, acquirers, and service providers.
0 articles published — first publishing Summer 2026
ISO 27001
Information security management system certification.
0 articles published — first publishing Summer 2026
SOC 2
Trust Services Criteria attestation for service providers.
0 articles published — first publishing Summer 2026
Penetration Testing
CREST DPT methodology applied to web, infrastructure, and cloud.
0 articles published — first publishing Summer 2026
Data Privacy/GDPR
UK GDPR audits, DPIAs, and data protection programmes.
0 articles published — first publishing Summer 2026
GRC
Programme alignment to NIST CSF, ISO 27001, CIS Controls v8, SOC 2.
0 articles published — first publishing Summer 2026
ON THE BENCH
In the editorial pipeline.
Three articles in active drafting. Working titles — final headlines may shift.
PCI DSS PCI DSS 4.0.1 Requirement 11.4.7 in practice — what ‘targeted risk analysis’ actually means
By Ronald Williams
ISO 27001 ISO 27001 Annex A.5 Information Security Policies — common audit findings
By Stephen Hancock
SOC 2 SOC 2 Type 2 vs ISO 27001 — when control mapping breaks down
By Sujith MP
SUBSCRIBE
Subscribe to be notified when we publish practitioner insights.
Roughly monthly. No marketing.
Every article is by-lined by a named consultant.
Source-cited against published standards. Reviewed quarterly for accuracy.
Already subscribed? You’ll receive every published article via email.