#iso27001 — Public Fediverse posts

Today's pet peeve from reviewing an advisory client's #infosec policies:
1) compliance mills who give their clients a business continuity _policy_ mislabeled as a business continuity _plan_ so they can claim for compliance purposes that a plan exists when it really doesn't; and
2) auditors who let audit subjects get away with calling a policy a plan, rather than dinging them for it and making them create a real plan.
#compliance #soc2 #iso27001

🔐 Third-Party Risk Management at RELIANOID

At RELIANOID, security and resilience extend beyond our own platform. We apply strict Third-Party Risk Management (TPRM) practices to ensure that every vendor, partner, or supplier meets our high standards for security, compliance, and reliability.

More details: https://www.relianoid.com/security-compliances/relianoid-third-party-risk-management-policy/

#RELIANOID #ThirdPartyRiskManagement #CyberSecurity #Compliance #DORA #NIS2 #GDPR #ISO27001 #OperationalResilience #SupplyChainSecurity