#iso27001 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #iso27001, aggregated by home.social.
-
Today's pet peeve from reviewing an advisory client's #infosec policies:
1) compliance mills who give their clients a business continuity _policy_ mislabeled as a business continuity _plan_ so they can claim for compliance purposes that a plan exists when it really doesn't; and
2) auditors who let audit subjects get away with calling a policy a plan, rather than dinging them for it and making them create a real plan.
#compliance #soc2 #iso27001 -
Today's pet peeve from reviewing an advisory client's #infosec policies:
1) compliance mills who give their clients a business continuity _policy_ mislabeled as a business continuity _plan_ so they can claim for compliance purposes that a plan exists when it really doesn't; and
2) auditors who let audit subjects get away with calling a policy a plan, rather than dinging them for it and making them create a real plan.
#compliance #soc2 #iso27001 -
Today's pet peeve from reviewing an advisory client's #infosec policies:
1) compliance mills who give their clients a business continuity _policy_ mislabeled as a business continuity _plan_ so they can claim for compliance purposes that a plan exists when it really doesn't; and
2) auditors who let audit subjects get away with calling a policy a plan, rather than dinging them for it and making them create a real plan.
#compliance #soc2 #iso27001 -
Today's pet peeve from reviewing an advisory client's #infosec policies:
1) compliance mills who give their clients a business continuity _policy_ mislabeled as a business continuity _plan_ so they can claim for compliance purposes that a plan exists when it really doesn't; and
2) auditors who let audit subjects get away with calling a policy a plan, rather than dinging them for it and making them create a real plan.
#compliance #soc2 #iso27001 -
Today's pet peeve from reviewing an advisory client's #infosec policies:
1) compliance mills who give their clients a business continuity _policy_ mislabeled as a business continuity _plan_ so they can claim for compliance purposes that a plan exists when it really doesn't; and
2) auditors who let audit subjects get away with calling a policy a plan, rather than dinging them for it and making them create a real plan.
#compliance #soc2 #iso27001 -
@roelgrif : en dit kabinet geeft ook niets om onze privacy.
"Slimme oplossingen" - slim voor wie?
https://todon.nl/@ErikvanStraten/116482603102360900
#CE #ISO27001 #NEN7510 #BullShitCerts#Topicus #PGO #MedischeGegevens #EHDS #AVG #Mitz #MijnMitz #BigTechIsEvil #CloudflareIsEvil
-
NIS2: It’s not just an EU thing.
A quiet shift in cybersecurity regulation is about to make noise – and UK businesses need to pay attention.
NIS2 massively expands the original NIS Directive. More sectors. More requirements. More pressure on leadership to actually care about cyber risk.
If your business touches the EU (or works with suppliers who do), it could be in scope – even if you’re based in the UK. And even if it’s not mandatory, aligning with NIS2 is quickly becoming a mark of credibility.
🔒 Risk-based security
⏱ Rapid incident reporting
🔗 Supply chain accountability
📈 Leadership-level responsibilityNot sure if you’re affected? Want to get ahead of the game? Let’s talk.
Compliance is moving fast. I’ll help you keep up 👽
https://paulreynolds.uk/nis2-compliance/
#NIS2 #CyberSecurity #Compliance #RiskManagement #SupplyChainSecurity #YDC #CyberEssentials #ISO27001 #Leadership
-
"Ferner wird mit dem Anforderungskatalog ein Mapping auf die ISO 22301:2019 zur Verfügung gestellt, um die Komptabilität aufzuzeigen."
