09 Apr Third Party Risk Management Toyotas Are Better Than Audis Because Toyota’s Vendor Risk Management Is Better January 19, 2024 By John Verry It’s always interesting to me to see how different industries handle vendor risk management. Often when we see a wave of leads/opportun... Continue reading
17 Oct ISMS Consulting Get ISO-27001 & SOC2 “Certified” At The Same Time – Save Time, Money & Headaches! October 17, 2013 By John Verry Increasingly we are seeing organizations that are deciding to use both ISO-27001 and SOC2 to demonstrate their commitment to informatio... Continue reading
11 Jun ISO 27001 Certification | Category - Pivot Point Security The Relationship Between the ISO 27001 and ISO 27002 Standards January 13, 2024 By John Verry A common misconception is that an organization can choose to get certified to the ISO 27002 standard. I’ve noticed that this misconcep... Continue reading
27 Jun ISO 27001 Certification | Category - Pivot Point Security ISO-27010 – Information Security Guidance for Information Exchange January 13, 2024 By John Verry Our Ethical Hacker Roundup last week included a blurb on stricter laws to protect patient health information (PHI) in Health Informatio... Continue reading
02 Nov ISMS Consulting ISO 27002 Gap Assessment vs BITS Shared Assessment November 2, 2011 By Pivot Point Security During a recent discussion, a customer asked John Verry what the differences are between an ISO 27002 Gap Assessment and a BITS Shared ... Continue reading