Access control

So I could say that was a really good explanation of the general requirements and the alignment between those requirements.

But more specifically, I want to talk about ISO 27001 Annex A, which is going to define the controls such as access control, asset management, cryptography, physical security, operation security, supply relationships.

But the key point is the standard does not guarantee how deeply these controls are implemented in operational reality.

Yes, and this is where TSAX becomes more demanding because it doesn't only look at existence, it evaluates credibility of implementation as well.

So let me give a simple example.

ISO 27001 requires access control, but TSAX will challenge.

Are access rights role-based? Are they reviewed regularly? Are they removed immediately after role change, which is quite probable in many organizations? Can you prove it with records?

And that's a fundamental shift from compliance to evidence-based trust.

Since the petition's launch, the estate has said through its website that there will only be seven days across September and October when deer stalking won't be carried out, and has implied that people could walk on the hills during this period.

However, a spokesperson for Perth and Kinross Council confirmed to The National that any blanket closure of access rights would be unlawful under the Land Reform Scotland Act of 2003.

It comes after Rambler Scotland said its petition had seen more than 15,000 people sign it and it's the most backed campaign in the organisation's history.

When asked if the Council had taken any action against the estate since the petition launched, a spokesperson for the local authority said, ''We note the petition by Rambler Scotland.

The Council's position is that any blanket closure of access rights would be unlawful under the Land Reform Scotland Act of 2003 and we will take appropriate enforcement action when necessary to restore lawful access.'' The Council has a duty to uphold access rights and would reiterate that both landowners and access takers should be acting responsibly and following the Scottish Outdoor Access Code, which includes specific advice on deer stalking.

The spokesperson added that if anyone is obstructed or deterred from responsible access to the outdoors in Perth and Kinross, in accordance with the national guidance, they should report the details to the local authority via its website.

Rambler Scotland director Brendan Paddy told The National that along with a substantial public backing, the campaign has also been supported by several MSPs from the Greens, the SNP, Labour and the Liberal Democrats.