How to Provide Audit Evidence
So, you’ve been tasked with providing evidence for an audit. You may be wondering what your auditor is even looking for. Let’s take a look behind the scenes at why [...]
Developing a Master Asset Inventory for SaaS Organizations
Whether you are pursuing an ISO 27001 certification or a SOC 2 report, a robust asset inventory is going to be key to addressing compliance requirements and help you understand [...]
How to Perform a Risk Assessment (Part 2)
After you perform a risk assessment, what do you do with the results? Find out the answers to that and other common risk assessment questions in part 2 of this series! [...]
How to Perform a Risk Assessment (Part 1)
How do you perform a risk assessment, and what do you do with the results? Find out the answers to some common risk assessment questions in Part 1 of our two-part [...]
Maintaining A Compliant Business Continuity Environment
Do your business continuity plans account for your company’s compliance and regulatory requirements? For many, the answer to that question is “no”. An unfortunate reality encountered by companies across the [...]
Improving Your ISMS Through Clause 7.2
Continual improvement of an ISMS (or any ISO management system) should always yield results for the organization. But what does “continual improvement” for a high growth technology company look like [...]
Combining ISO 9001 and ISO 27001 Efforts
Key areas of overlap to help you harmonize workstreams. The compliance universe is ever-expanding. In addition to various information security requirements, often including ISO 27001, business partners are increasingly asking [...]
ISO 27001 vs SOC 2: Choosing a Compliance Framework
In a previous blog post, we discussed the differences between SOC 2 vs ISO 27001. In this post, we will look at the factors affecting the decision of choosing which [...]
SOC 2 vs ISO 27001: What’s The Difference?
Navigating the ins and outs of two of the most popular compliance frameworks. When it comes to vendor due diligence, many companies are raising the bar. This article will help [...]
Webinar | Everything You Need to Prepare for ISO 27701 Certification
Check out our webinar from Philip Brudney and Christian Hyatt in which they discuss everything you need to prepare for an ISO 27701 certification, including the link between ISO 27701 [...]