Remove Application Remove Gap Analysis Remove Mitigation Remove Risk Reduction
article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

They include: ISO 27005: Information security risk management these standard guides companies that are maturing their ISMS and controls programs. Rather than implementing controls as a checkbox activity, risk-driven organizations proactively choose controls that best mitigate their risks. Perform a Gap Analysis.

Audit 52
article thumbnail

Audit Checklist for SOC 2

Reciprocity

.” The most prevalent types of service organizations to which the SOC applies include, but are not limited to: Software as a service (SaaS) businesses that offer software, applications, and websites. Therefore, select the trust services criteria that are appropriate and applicable to your services. Risk assessment.

Audit 52