article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

If using an ISO audit software tool to achieve ISO certification is on your compliance roadmap, here’s a quick primer to get you up to speed and jumpstart your ISO compliance efforts. The ISMS provides tools for management to make decisions, exercise control, and audit the effectiveness of InfoSec efforts within the company.

Audit 52
article thumbnail

7 mistakes that ISO 27001 auditors make

IT Governance BC

However, there may still be room to improve your practices, and it might even be the case that your activities aren’t necessary. Understand your GDPR and PECR compliance gaps by contacting IT Governance for a privacy audit. They allow cost-cutting to starve the audit. They use the audit to generate consultancy work.

Audit 64
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Third-Party Risk Management 101

Fusion Risk Management

In many cases, it’s a series of ongoing reports of activity; in others, it may be reports of consumer complaints or notification guidelines in the event of certain activities occurring (e.g., OCC Bulletin 2013 29: Third-Party Relationships: Risk Management Guidance | OCC. breach, management departures, etc.).

article thumbnail

Sustainability Reporting Accelerator

Advancing Analytics

Since 1 October 2013 the Companies Act 2006 (Strategic Report and Directors’ Report) Regulations 2013 have required all UK quoted companies to report on greenhouse gas emissions as part of their annual Directors' Report. Scope 3a are all indirect emissions relating to the upstream activities, which aid the business in its activities.

Travel 52
article thumbnail

Data Privacy Awareness Month 2024: Roundup of Expert Quotes

Solutions Review

We’ve seen US states such as California passing their own privacy laws and drafting detailed regulations on cybersecurity audits, risk assessments, and automated decision making privacy by design in practice a must-do to be able to effectively respond to the demands of augmented privacy regulatory frameworks. Larry Whiteside, Jr.,

article thumbnail

Data Privacy Day 2024: The Definitive Roundup of Expert Quotes

Solutions Review

We’ve seen US states such as California passing their own privacy laws and drafting detailed regulations on cybersecurity audits, risk assessments, and automated decision making privacy by design in practice a must-do to be able to effectively respond to the demands of augmented privacy regulatory frameworks. Larry Whiteside, Jr.,