article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

If using an ISO audit software tool to achieve ISO certification is on your compliance roadmap, here’s a quick primer to get you up to speed and jumpstart your ISO compliance efforts. The ISO 27001 family, published by the International Organization for Standardization, includes a set of standards for information security.

Audit 52
article thumbnail

Product’s Perspective: True Risk: Why External Vendor Ratings are Only Half the Picture

LogisManager

It’s no question that they’ve got a lot to share, so we’ll be publishing these insights to our blog to help you make more informed business decisions. This vendor transparency helps you more effectively and efficiently mitigate third party risk.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Silicon Valley Bank (SVB) Failures in Risk Management: Why ERM vs GRC

LogisManager

For example, SVB had a Moody’s A1 issuer rating and KPMG signed off on SVB’s bank’s audit just 14 days before it declared bankruptcy. Their opinions, such as “Audit Opinions” and “Credit Ratings,” are based on the information provided to them, and they cannot be held liable for errors and omissions.

Banking 98
article thumbnail

The Colonial Pipeline Hack: Failure in Risk Management

LogisManager

This is especially important when considering the additional scrutiny and cost of SOC II and regulatory audits that are based largely on the strength of an organization’s ERM program. Risk Assessments & User Access Reviews. Unauthorized users having access to corporate devices is an extremely common and preventable cause of negligence.

article thumbnail

What Is Risk Management?

LogisManager

Once you have assessed these risks you will want to create a plan for risk mitigation and risk monitoring so that you are in control of potential threats. Audit Management: Making sure that every business area within your organization is stacking up and improving accordingly. Risk Management Step #3: Mitigate.

article thumbnail

10 lessons from the report on the NHS WannaCry cyber attack

Plan B Consulting

The National Audit Office investigation into the “WannaCry cyber attack and the NHS” was published this week, so I thought I would share 10 lessons from the report which are relevant to all organisations. In many cases the mitigation is very simple, are you doing the basics to protect your organisation? Staff overtime c.

article thumbnail

10 lessons from the report on the NHS WannaCry cyber attack

Plan B Consulting

The National Audit Office investigation into the “WannaCry cyber attack and the NHS” was published this week, so I thought I would share 10 lessons from the report which are relevant to all organisations. In many cases the mitigation is very simple, are you doing the basics to protect your organisation? Staff overtime c.