ISO/IEC TS 27008:2019 - Assessing Information Security Controls, Sampling Techniques

Jim에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Jim 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

The ISO Review Podcast « »
ISO/IEC TS 27008:2019 - Assessing Information Security Controls, Sampling Techniques - Clause 7.5

6M ago 33:09

MP3•에피소드 홈

Howard and Jim chat about ISO/IEC TS 27008:2019 - Assessing Information Security Controls, Sampling Techniques - Clause 7.5.
POINTS DISCUSSED

Introduction and Context
The importance of neutrality and objectivity in selecting sample items for an audit.
The criteria used to determine samples.
The steps that should be taken after an audit to ensure effective communication of results and implementation of corrective actions.
The implications when auditors focus on conformance rather than looking for nonconformance, and how this perspective shift impact the outcome of an audit.

LEARN MORE

Click here to try Conformance1's free online ISO 27001 Gap Checklist.
UPCOMING EPISODES
Howard and Jim continue to deep dive into ISO/IEC TS 27008:2019 - Process for Assessing Controls, Clause 8.1.
NEXT STEPS
Please follow us on your preferred podcast directory. We appreciate your likes & comments, and shares.
Click here to visit the SimplifyISO website to discover how our cloud-based management system will satisfy all the Standards requirements, client requirements, and any other requirements that you have to meet.
Click here to visit the International Management System Institute website, and learn about how and why you should consider becoming a Certified ISO Management System Professional.
Learn more about Jim on LinkedIn & YouTube
LinkedIn
LinkedIn Articles
YouTube
Book Recommendations:

Turn the Ship Around!: A True Story of Turning Followers into Leaders by L. David Marquet
The Checklist Manifesto: How to Get Things Right by Atul Gawande
Learn more about Howard
Click here to learn more about the Coaching and Podcast Services provided by Fox Coaching, inc.
Keywords
ISO, ISO 27008, Information Security Management Systems, Risk Management, Sampling Techniques, ISO Review Podcast, Jim Moran, Howard Fox
#ISO27001 #ISO27008 #InformationSecurityManagementSystems #RiskManagement #TSamplingTechniques #ISOReviewPodcast

50 에피소드

#Jim #Tech #MBA #Business #Podcasting Education