article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

If using an ISO audit software tool to achieve ISO certification is on your compliance roadmap, here’s a quick primer to get you up to speed and jumpstart your ISO compliance efforts. The ISO 27001 family, published by the International Organization for Standardization, includes a set of standards for information security.

Audit 52
article thumbnail

Product’s Perspective: True Risk: Why External Vendor Ratings are Only Half the Picture

LogisManager

It’s no question that they’ve got a lot to share, so we’ll be publishing these insights to our blog to help you make more informed business decisions. Services are available to collect and review key vendor documents like contracts and SOC 2s, and they can even evaluate a vendor’s financial statements against its industry peers.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Silicon Valley Bank (SVB) Failures in Risk Management: Why ERM vs GRC

LogisManager

They evaluate their vendor and partner communities to identify the third parties they depend on the most and map them to the business risks, controls, and testing that rely on them. For example, SVB had a Moody’s A1 issuer rating and KPMG signed off on SVB’s bank’s audit just 14 days before it declared bankruptcy.

Banking 98
article thumbnail

The Colonial Pipeline Hack: Failure in Risk Management

LogisManager

For example, a forensic finding made during an evaluation of Colonial Pipeline noted numerous known and preventable vulnerabilities, such as unpatched and outdated systems, that likely led to the security breach. Risk Assessments & User Access Reviews. Steven is a frequent speaker in the Energy , Financial Services and Cyber industries.

article thumbnail

What Is Risk Management?

LogisManager

Audit Management: Making sure that every business area within your organization is stacking up and improving accordingly. Internal process, compliance, IT and facility-driven audits are essential to reduce threats and ineffectiveness and keep your business thriving.

article thumbnail

You Can Tell a Lot about a Company from its Sustainability Report

Pure Storage

The term ESG was coined by the investment industry as a way of evaluating businesses on non-financial metrics that can provide insights into unforeseen risk and explored growth opportunities. Are the vendor assumptions substantiated and validated by a 3rd party audit—and are they reflective of the published information?

Audit 98
article thumbnail

How To Develop An ESG Strategy

LogisManager

Now more than ever, socially conscious investors and regulators alike are evaluating organizations based on this criteria by evaluating their environmental friendliness, DEI initiatives, leadership transparency and more. Environmental, Social and Corporate Governance (ESG) criteria are a set of standards for business operations.