Remove 2018 Remove Activation Remove Evaluation Remove Mitigation
article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Rather than implementing controls as a checkbox activity, risk-driven organizations proactively choose controls that best mitigate their risks. Your primary reference points will be ISO/IEC 27001:2013, ISO/IEC 27002:2013, and ISO/IEC 27000:2018. Evaluating risks. Form a Project Team. Identifying possible threats.

Audit 52
article thumbnail

Risky Business: Is Looking at Likelihood a Waste of Time?

Plan B Consulting

In the 2010 and 2013 GPGs we looked at threat assessments, whereas in the more recent 2018 GPG, we cover a threat and risk assessment. For a while, business continuity has always had a slightly uneasy relationship with risk management.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Risky Business: Is Looking at Likelihood a Waste of Time?

Plan B Consulting

In the 2010 and 2013 GPGs we looked at threat assessments, whereas in the more recent 2018 GPG, we cover a threat and risk assessment. For a while, business continuity has always had a slightly uneasy relationship with risk management.

article thumbnail

All Signals are Red: The Evolving Security Landscape

Fusion Risk Management

A new product or service is introduced that directly mitigates the attack, and everyone breathes a sign of relief. In just the first half of 2018, the amount of new malware was equal to all the malware that came out in 2017.

article thumbnail

What Does a Compliance Management System Look Like?

Reciprocity

Even institutions that don’t use social media should, “following a risk assessment … still consider the potential for negative comments or complaints that may arise within the many social media platforms described above, and, when appropriate, evaluate what, if any, action it will take to monitor for such comments and respond to them.”

article thumbnail

Internal Controls & Fraud Prevention

Reciprocity

So what can your organization do to minimize the possibility of fraud and mitigate its potential harm? Internal fraudsters might engage in fraudulent activity for years by taking advantage of their “trusted insider” status. In 2018 the average corporate loss arising from fraud was $2.75 Strong internal controls.

Audit 52