Penetration Testing
Press Release
ISO 27001 is Not a “Point in Time” Audit
A potential client was trying to decide whether he should pursue a SOC 2 Type II Service Auditors report or an ISO 27001 certification ...
Tag Archives: Audit
22
Feb
ISMS Interdependence: Risk Assessment, Incident Response and Business Continuity Plans
One of our ISO 27001 clients in the legal vertical recently asked Pivot Point Security to perform a gap assessment of their Incident Re...
25
Oct
Rationalizing Risk Assessments – Objectivity be Damned?
Just finished my nth (non-fulfilling) conversation on our approach to Information Security Risk Assessments with our Audit Lead. It st...