28 Sep ISO 27001 Certification | Category - Pivot Point Security You Don’t Define Your ISO 27001 Scope – Your Information Does January 19, 2024 By Richard Barrus In the ISO 27001 framework, the most important element is scope. But because ISO 27001 isn’t as prescriptive as some other cybersecurit... Continue reading
27 Sep ISO 27001 Certification | Category - Pivot Point Security ISO 27001 Certification Shouldn’t Start with a Gap Assessment January 18, 2024 By Richard Barrus In our ISO 27001-as-a-Service practice, the single most common mistake we see with organizations prepping for ISO 27001 certification i... Continue reading
17 Jun ISO 27001 Certification | Category - Pivot Point Security ISO 27701 Privacy Extension “Lessons Learned”: Data Mapping January 13, 2024 By Richard Barrus The new ISO 27701 “certifiable extension” to ISO 27001 lets you add a Privacy Information Management System (PIMS) to your Information ... Continue reading
16 Jun ISO 27001 Certification | Category - Pivot Point Security Does My Company Need a (Virtual) Data Protection Officer? January 12, 2024 By Richard Barrus One of the questions we hear most frequently about privacy compliance is, ‘Does my company need a Data Protection Officer?’ What is a D... Continue reading
15 Jun ISO 27001 Certification | Category - Pivot Point Security Does ISO 27701 Certification Mean You Comply with GDPR and CCPA? January 12, 2024 By Richard Barrus The new ISO 27701 standard allows companies to extend their current ISO 27001 Information Security Management System (ISMS) to cover da... Continue reading