article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

If using an ISO audit software tool to achieve ISO certification is on your compliance roadmap, here’s a quick primer to get you up to speed and jumpstart your ISO compliance efforts. The ISMS provides tools for management to make decisions, exercise control, and audit the effectiveness of InfoSec efforts within the company.

Audit 52
article thumbnail

7 mistakes that ISO 27001 auditors make

IT Governance BC

A good auditor will use the checklist as a summary at the beginning or end of their audit, with a more detailed assessment in their report, or they’ll use a non-binary system that doesn’t restrict them to stating that a requirement either has or hasn’t been met. They allow cost-cutting to starve the audit. Good auditing practices.

Audit 64
article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

COSO’s ERM framework builds upon, and is intended to work with, the committee’s internal control framework issued in 1992 and updated in 2013. 2007-2012): Audit management, enterprise, and operational risk management, compliance beyond financial controls, and more. GRC 4.0: (2018-present): Automated GRC.