article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Within the ISO 27001 family, there are many other vital documents. Perform a Gap Analysis. A gap analysis gives you a high-level summary of what needs to be done to attain certification and allows you to examine and compare your organization’s current information security arrangements to the ISO 27001 standards.

Audit 52
article thumbnail

Audit Checklist for SOC 2

Reciprocity

.” The most prevalent types of service organizations to which the SOC applies include, but are not limited to: Software as a service (SaaS) businesses that offer software, applications, and websites. Therefore, select the trust services criteria that are appropriate and applicable to your services. Perform a SOC 2 Gap Analysis.

Audit 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Most Overlooked Security Issues Facing the Financial Services

Solutions Review

The rise – and sophistication – of ransomware attacks has been documented by all parties concerned. Please note: usually when the initial gap analysis is done (remember step 1), you end up with a long list of deviations. Cybersecurity and Infrastructure Security Agency (CISA) adds these 3 security issues to its list.”

article thumbnail

The 5 Golden Rules of When Business Continuity Software Goes Bad

Plan B Consulting

To develop a fit-for-purpose BIA you need to do it in the same way as you would manually, which is just the information gathered typed into the software rather than a BIA document or spreadsheet. Castellan will also model recovery paths during incidents and you can use these to see a timetable for recovery.

article thumbnail

The 5 Golden Rules of When Business Continuity Software Goes Bad

Plan B Consulting

To develop a fit-for-purpose BIA you need to do it in the same way as you would manually, which is just the information gathered typed into the software rather than a BIA document or spreadsheet. Castellan will also model recovery paths during incidents and you can use these to see a timetable for recovery.

article thumbnail

The 5 Golden Rules of When Business Continuity Software Goes Bad

Plan B Consulting

To develop a fit-for-purpose BIA you need to do it in the same way as you would manually, which is just the information gathered typed into the software rather than a BIA document or spreadsheet. Castellan will also model recovery paths during incidents and you can use these to see a timetable for recovery.

article thumbnail

ISO 27001 Requirements Checklist: Steps and Tips for Implementation

Reciprocity

Once the ISO 27001 audit is complete, the auditor gives the organization a Statement of Applicability (SOA) summarizing its position on all security controls. It is separated into four components covering user access to data, systems, and applications. How Do You Perform a Gap Analysis? Cryptography, A.10