<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- Home -->
  <url>
    <loc>https://www.bitsecura.com/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/about/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/careers/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/contact/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/partners/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/offensive-security/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/iso-27001/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/iso-27701/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/iso-42001/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/dora/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/nis2/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/soc2/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/nist-csf/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/pci-dss/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/it-compliance/it-audit/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/specialised-services/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/specialised-services/it-grc/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/specialised-services/strategy/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/specialised-services/vciso/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/specialised-services/bcm/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/specialised-services/erm/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/specialised-services/tabletop-exercises/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/privacy-policy/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.4</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/cookie-policy/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.4</priority>
  </url>
  <!-- Articles (generated by scripts/build_blog.py) -->
  <url>
    <loc>https://www.bitsecura.com/resources/you-have-iso-42001-certification-now-the-real-work-begins/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/pci-dss-v4-0s-future-dated-requirements-are-now-mandatory-is-your-programme-ready/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/why-iso-42001-implementations-fail-and-what-successful-ones-do-differently/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-277012025-is-here-privacy-just-became-a-standalone-standard-and-your-organisation-needs-to-take-notice/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/dora-is-now-enforceable-here-is-what-financial-entities-need-to-focus-on-first/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/dora-and-bcm-what-the-digital-operational-resilience-act-requires-from-your-continuity-programme/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nis2-supply-chain-security-why-your-suppliers-cybersecurity-is-now-your-regulatory-problem/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/the-eu-ai-acts-february-2025-deadline-is-six-weeks-away-iso-42001-is-your-starting-point/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-27001-certified-now-what-the-isms-maintenance-reality-nobody-talks-about/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nist-csf-in-practice-how-to-build-a-security-programme-around-the-framework-not-just-reference-it/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-27001-iso-27701-iso-42001-running-all-three-without-running-three-programmes/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/12-months-to-the-iso-27001-transition-deadline-here-is-your-action-plan/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nis2-transposition-deadline-is-here-what-happens-if-your-member-state-hasnt-implemented-yet/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/ai-risk-assessment-under-iso-42001-what-it-requires-and-how-to-do-it-properly/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-277012025-is-coming-heres-what-we-know-and-how-to-prepare-before-it-lands/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/what-actually-happens-during-an-iso-27001-internal-audit-and-why-most-organisations-get-it-wrong/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/the-eu-ai-act-is-now-law-heres-what-iso-42001-covers-and-what-it-doesnt/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nist-ai-rmf-and-iso-42001-two-frameworks-one-ai-governance-strategy/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-22989-the-ai-vocabulary-standard-your-governance-team-needs-to-understand/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-27001-and-the-eu-cyber-resilience-act-what-smart-companies-are-doing-right-now/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/saq-or-roc-choosing-the-right-pci-dss-assessment-path-for-your-organisation/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/what-iso-420012023-actually-requires-a-practical-guide-for-organisations-deploying-ai/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nist-csf-2-0-is-here-what-changed-what-stayed-and-how-to-update-your-programme/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/tabletop-exercises-for-regulators-what-dora-nis2-and-cbest-require-you-to-demonstrate/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/security-leadership-for-scale-ups-why-fast-growing-companies-need-a-vciso-before-they-think-they-do/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/12-months-to-dora-compliance-where-most-financial-entities-are-and-where-they-need-to-be/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-420012023-is-here-the-worlds-first-ai-management-standard-what-it-is-and-why-it-matters/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/can-a-small-business-really-get-iso-27001-certified-the-honest-answer/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/internal-vs-external-it-audit-what-each-provides-and-why-you-need-both/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nist-csf-2-0-is-coming-whats-changing-and-what-it-means-for-your-security-programme/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/soc-2-continuous-monitoring-how-to-maintain-your-report-year-after-year-without-starting-over/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nis2-incident-reporting-the-24-hour-rule-and-what-counts-as-a-significant-incident/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/the-pci-dss-v3-2-1-retirement-date-is-six-months-away-here-is-your-transition-checklist/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/dora-incident-reporting-the-4-hour-rule-and-what-financial-entities-must-report/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/why-iso-27001-certifications-fail-and-how-to-make-sure-yours-doesnt/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nis2-and-personal-liability-what-board-members-and-executives-need-to-know-now/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-27001-transition-roadmap/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/emerging-technology-risk-how-to-manage-what-you-dont-fully-understand-yet/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/doras-ict-third-party-risk-requirements-what-financial-entities-must-do-about-their-suppliers/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/privacy-by-design-is-a-legal-requirement-iso-27701-is-how-you-prove-youre-actually-doing-it/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/grc-tooling-when-a-spreadsheet-is-enough-and-when-it-isnt/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/essential-vs-important-entities-under-nis2-which-are-you-and-why-it-matters/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/how-often-should-you-run-a-cybersecurity-tabletop-exercise/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/security-reporting-to-the-board-what-your-ceo-and-directors-actually-need-to-know/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/why-soc-2-audits-produce-exceptions-and-how-to-avoid-the-most-common-ones/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-27001-risk-assessment-guide/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/threat-led-security-strategy-why-generic-frameworks-dont-protect-you-from-your-actual-threats/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/dora-scope-are-you-in-the-complete-guide-to-who-the-regulation-covers/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/auditing-it-controls-in-cloud-environments-what-changes-and-what-doesnt/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-27001-93-controls/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nis2-vs-nis1-what-changed-and-why-the-upgrade-matters-for-your-organisation/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/dora-is-now-published-what-the-eus-digital-operational-resilience-act-means-for-financial-services/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/what-pims-certification-auditors-actually-look-for-and-how-to-make-sure-your-pims-is-ready/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-270012022-is-here/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/third-party-it-risk-why-your-suppliers-security-problem-is-your-problem/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/running-a-ransomware-tabletop-the-scenario-your-board-needs-to-experience/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/pci-dss-scoping-the-decision-that-determines-everything-else-about-your-compliance-programme/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/soc-2-vs-iso-27001-should-you-do-one-the-other-or-both/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/vciso-vs-mssp-why-security-leadership-and-security-operations-are-different-purchases/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/sox-it-audit-what-listed-companies-and-their-auditors-actually-examine/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nist-csf-implementation-tiers-using-them-honestly-to-drive-security-programme-improvement/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/how-to-justify-security-investment-to-a-board-that-doesnt-speak-cyber/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/quantifying-cyber-risk-moving-beyond-red-amber-green-to-numbers-that-drive-decisions/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/ransomware-and-your-dr-plan-why-traditional-backup-and-recovery-isnt-enough/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/pci-dss-v4-0-is-here-what-changed-and-what-it-means-for-your-cardholder-data-environment/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/do-you-need-iso-27001-before-you-can-get-iso-27701-certified-the-question-everyone-is-asking/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/what-is-a-vciso-and-does-your-organisation-need-one/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/what-is-a-cybersecurity-tabletop-exercise-and-why-every-organisation-should-run-one/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/the-asynchronous-audit-how-modern-it-audit-works-without-weeks-of-on-site-disruption/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/your-policy-framework-is-probably-broken-heres-how-to-tell-and-how-to-fix-it/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/how-long-does-soc-2-take-a-realistic-timeline-for-technology-companies/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/nist-csf-vs-iso-27001-two-frameworks-one-security-programme/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/cyber-maturity-assessment-how-to-know-where-you-actually-stand-before-you-decide-where-to-go/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/it-general-controls-the-four-domains-your-financial-auditor-is-already-examining/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/your-data-flow-map-is-the-foundation-of-your-pims-heres-how-to-build-one-that-actually-works/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/risk-appetite-in-practice-the-statement-every-board-approves-and-almost-no-one-uses/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/the-five-soc-2-trust-services-criteria-what-each-covers-and-which-you-actually-need/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/your-dr-plan-has-never-been-tested-thats-your-biggest-recovery-risk/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/it-grc-what-it-is-what-it-isnt-and-why-it-matters-more-than-your-compliance-checklist/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/what-it-audit-actually-is-and-why-its-not-the-same-as-a-penetration-test/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/the-nist-cybersecurity-framework-explained-five-functions-that-structure-how-you-think-about-security/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/it-risk-management-the-discipline-that-connects-technology-decisions-to-business-outcomes/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/what-is-a-cyber-security-strategy-and-why-most-organisations-dont-have-one/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/soc-2-type-i-vs-type-ii-what-the-difference-means-for-your-clients-and-your-business/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/disaster-recovery-vs-business-continuity-understanding-the-difference-before-you-design-either/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/why-iso-27701-pims-implementations-fail-and-the-patterns-we-see-every-time/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/pii-controllers-vs-pii-processors-how-iso-27701-draws-the-line-and-what-it-means-for-your-organisation/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/gdpr-has-been-live-for-18-months-why-cant-organisations-prove-theyre-compliant-iso-27701-has-the-answer/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://www.bitsecura.com/resources/iso-27701-is-here-the-standard-that-turns-gdpr-accountability-into-something-you-can-actually-certify/</loc>
    <lastmod>2026-03-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
</urlset>
