Resources · Infographics

Compliance Infographics

Visual explainers and downloadable reference guides across PCI DSS, ISO 27001, SOC 2 and cryptography. Open any card in a new tab — PDF guides unlock with your work email.

ISO 27001 · Certification

The ISO 27001 Compliance Journey

From “we should get certified” to holding the certificate — the seven stages, step by step.

View infographic →
PCI DSS · Self-Assessment

PCI DSS SAQ Selection

Find the right SAQ for your business — a decision guide across all nine SAQ types.

View infographic →
SOC 2 · Assessment

SOC 2 Type 2 Assessment

The four phases, the observation-period timeline, and the five Trust Service Criteria.

View infographic →
SOC 2 · Trust Services

AICPA Trust Services Criteria

The five AICPA Trust Service Criteria that SOC 2 reports are built on.

View infographic →
PDF
PCI DSS v4.0 · Architecture

PCI DSS v4.0 Network Architecture

A reference cardholder-data-environment network — internet, DMZ, CDE and internal segmentation zones.

Download PDF →
PDF
PCI DSS v4.0 · Key Management

PCI DSS v4.0 HSM Key Management Workflow

End-to-end HSM key management — lifecycle stages, key hierarchy, rotation workflows, dual control and audit.

Download PDF →
PDF
PCI DSS v4.0 · Operations Reference

Key Management Operations Center

A 24/7 operations reference — key lifecycle, incident response, rotation schedule, dual control and quick reference.

Download PDF →
PDF
Cryptography · Selection Guide

Cryptographic Algorithm Selection

Choose the right algorithm for encryption, signatures, hashing and key exchange — recommended, conditional and deprecated.

Download PDF →
PDF
Cryptography · 1970–2035 Timeline

Cryptographic Algorithm Deprecation Timeline

Algorithm status over time — recommended, transitioning, deprecated and prohibited — incl. the post-quantum migration window.

Download PDF →
Security Awareness · Access

Anatomy of a Strong Password

Small habits that dramatically reduce the risk of an account takeover.

View infographic →
Security Awareness · Email

Spot a Phishing Email

Six red flags to check before you click, reply or download.

View infographic →

Want these tailored to your business?

Talk to an independent auditor or assessor — conflict-free, across New Zealand & Australia.

Book a scoping call →