#iso27001 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #iso27001, aggregated by home.social.
-
Auditing basic SOC 2 Security is just the minimum. 🛡️
Expanding to Privacy, Confidentiality & Availability proves to enterprise buyers you're ready for high-stakes deals.
Are you auditing the right trust criteria?
-
Auditing basic SOC 2 Security is just the minimum. 🛡️
Expanding to Privacy, Confidentiality & Availability proves to enterprise buyers you're ready for high-stakes deals.
Are you auditing the right trust criteria?
-
Auditing basic SOC 2 Security is just the minimum. 🛡️
Expanding to Privacy, Confidentiality & Availability proves to enterprise buyers you're ready for high-stakes deals.
Are you auditing the right trust criteria?
-
Auditing basic SOC 2 Security is just the minimum. 🛡️
Expanding to Privacy, Confidentiality & Availability proves to enterprise buyers you're ready for high-stakes deals.
Are you auditing the right trust criteria?
-
Auditing basic SOC 2 Security is just the minimum. 🛡️
Expanding to Privacy, Confidentiality & Availability proves to enterprise buyers you're ready for high-stakes deals.
Are you auditing the right trust criteria?
-
Today's pet peeve from reviewing an advisory client's #infosec policies:
1) compliance mills who give their clients a business continuity _policy_ mislabeled as a business continuity _plan_ so they can claim for compliance purposes that a plan exists when it really doesn't; and
2) auditors who let audit subjects get away with calling a policy a plan, rather than dinging them for it and making them create a real plan.
#compliance #soc2 #iso27001 -
𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴: 𝘙𝘦𝘲𝘶𝘪𝘳𝘦𝘥 𝘣𝘺 𝘊𝘰𝘮𝘱𝘭𝘪𝘢𝘯𝘤𝘦, 𝙎𝙩𝙧𝙚𝙣𝙜𝙩𝙝𝙚𝙣𝙚𝙙 𝙗𝙮 𝙍𝙀𝙇𝙄𝘼𝙉𝙊𝙄𝘿
From GDPR to PCI DSS, ISO 27001, SOC 2, GLBA, HIPAA, and SWIFT CSCF — penetration testing is no longer optional. 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻𝘀 𝘄𝗼𝗿𝗹𝗱𝘄𝗶𝗱𝗲 𝗱𝗲𝗺𝗮𝗻𝗱 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻𝘀 𝗽𝗿𝗼𝘃𝗲 𝘁𝗵𝗮𝘁 𝘁𝗵𝗲𝗶𝗿 𝗱𝗲𝗳𝗲𝗻𝘀𝗲𝘀 𝗵𝗼𝗹𝗱 𝗮𝗴𝗮𝗶𝗻𝘀𝘁 𝗿𝗲𝗮𝗹-𝘄𝗼𝗿𝗹𝗱 𝘁𝗵𝗿𝗲𝗮𝘁𝘀.
𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 is the baseline. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 is the destination. 𝗪𝗶𝘁𝗵 𝗥𝗘𝗟𝗜𝗔𝗡𝗢𝗜𝗗, 𝘆𝗼𝘂 𝗴𝗲𝘁 𝗯𝗼𝘁𝗵.
#Pentesting #CyberSecurity #Compliance #ISO27001 #PCI #SOC2 #HIPAA #GLBA #GDPR #SWIFT #InfoSec
-
We do retros, but nothing changes. "Sound familiar? 🛑
#ISO9001 PDCA framework fixes broken feedback loops-turning useless retros into powerful engines for continuous improvement.
How actionable are your sprint retros? ⚡
-
Scapegoating after an outage only forces devs to hide mistakes. 🤫
#ISO9001 shifts focus from human error to process failure-turning costly bugs into automated, permanent protections.
How do you run your post-mortems? 🛠️
-
If you have ADHD, then #ISO27001 **will** kill you.
-
Speed without structure is just chaos. 🌪️
ISO 9001 turns messy CI/CD pipelines into high-velocity release engines-codifying quality gates and ownership so you scale safely.
Who signs off on your code before it goes live? ⚡