Remove 2013 Remove Evaluation Remove Hazard Remove Mitigation
article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Rather than implementing controls as a checkbox activity, risk-driven organizations proactively choose controls that best mitigate their risks. Your primary reference points will be ISO/IEC 27001:2013, ISO/IEC 27002:2013, and ISO/IEC 27000:2018. Evaluating risks. Form a Project Team. Launch High-Level Policy Development.

Audit 52
article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

Not long ago, risk managers concerned themselves mainly with hazards such as fires and floods; or in the financial sector, loan defaults (credit risk). COSO’s ERM framework builds upon, and is intended to work with, the committee’s internal control framework issued in 1992 and updated in 2013. Are there differences at all?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Risky Business: Is Looking at Likelihood a Waste of Time?

Plan B Consulting

In the 2010 and 2013 GPGs we looked at threat assessments, whereas in the more recent 2018 GPG, we cover a threat and risk assessment. Your building could be state of the art, brand new and with lots of features in place to prevent a fire, or it could be old, rickety, with poor wiring and a fire hazard just waiting to happen.

article thumbnail

Risky Business: Is Looking at Likelihood a Waste of Time?

Plan B Consulting

In the 2010 and 2013 GPGs we looked at threat assessments, whereas in the more recent 2018 GPG, we cover a threat and risk assessment. Your building could be state of the art, brand new and with lots of features in place to prevent a fire, or it could be old, rickety, with poor wiring and a fire hazard just waiting to happen.