16 Jun ISO 27001 Certification | Category - Pivot Point Security Does My Company Need a (Virtual) Data Protection Officer? January 12, 2024 By Richard Barrus One of the questions we hear most frequently about privacy compliance is, ‘Does my company need a Data Protection Officer?’ What is a D... Continue reading
15 Jun ISO 27001 Certification | Category - Pivot Point Security Does ISO 27701 Certification Mean You Comply with GDPR and CCPA? January 12, 2024 By Richard Barrus The new ISO 27701 standard allows companies to extend their current ISO 27001 Information Security Management System (ISMS) to cover da... Continue reading
14 Jun ISO 27001 Certification | Category - Pivot Point Security ISO 27701 Privacy Extension “Lessons Learned”: Scope January 13, 2024 By Richard Barrus The new ISO 27701 standard enables organizations to add a “certifiable extension” for privacy information management to an existing ISO... Continue reading
11 Jun ISO 27001 Certification | Category - Pivot Point Security Processor Versus Controller: What Do These Privacy Terms Mean? And Does One or Both Apply to Your Business? January 14, 2024 By Richard Barrus The new ISO 27701 standard, “Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Re... Continue reading
18 May ISMS Consulting Why You Should Tell Your ISO 27001 or SOC 2 Auditor That You Want as Many Nonconformities as Possible January 15, 2024 By John Verry Part of my day job is acting as Pivot Point Security’s CISO. In that role, I have participated in our ISO 27001 ISMS Internal Audit and... Continue reading