How to Provide Audit Evidence
So, you’ve been tasked with providing evidence for an audit. You may be wondering what your auditor is even looking for. Let’s take a look behind the scenes at why [...]
Webinar: SOC 2: Everything You Need to Get a SOC 2 Report
Check out our webinar from Christian White and Christian Hyatt in which they cover the basics of SOC 2 reporting, what to expect during a SOC 2 audit, and why [...]
COVID-19 and ISO 27001: What Coronavirus Means for Your Certification Audit
Many organizations have been impacted by office closures during the COVID-19 pandemic. Here's how to maintain your ISO 27001 certification during the crisis. Many organizations are facing the challenge of [...]
Advice for Taking the CISA Exam (Updated)
Everything you need to know to pass with flying colors. As risk3sixty continues to grow, more members of our team will be taking the Certified Information Systems Auditors (CISA) exam [...]
How to Create Effective Policies
How to leverage information security policies into leveling up your security program. People often regard information security policy as a "check-the-box" compliance initiative. Many organizations will copy a policy [...]
Craftsmanship in Music and Compliance
If you’ve been on stage for a speech or performing arts, you know stage fright is real. Businesses can get nervous when they hear the word "audit" in the same [...]
Advice for Studying and Passing the CISSP Exam
This past week I sat for the (ISC)2 CISSP exam and passed on my first attempt! With the entire preparation and test taking experience still fresh on my mind, I [...]
IT Audit Techniques – Inquiry, Observation, Inspection
The first thing I try to explain to new auditors (or clients going through an audit for the first time) is what techniques IT auditors use to audit. Most people [...]
Advice for Taking the CISA Exam
This past December I took the ISACA CISA exam and I’m pleased to announce that last week, I got my confirmation letter stating that I passed in the top 10 [...]
Pen Testing: Malicious File Execution
What is a Malicious File Execution Vulnerability?Malicious file execution vulnerabilities (also called File Inclusion Vulnerabilities) is a vulnerability that occurs due to user input or uploads to websites not being [...]