Building an ISMS people actually use
A method for standing up an ISO/IEC 27001 management system that produces evidence in daily operation instead of a binder assembled before the audit.
Governance3 Sept 202622 min read
Playbooks
Each playbook takes one job, such as an ISMS, a risk register or a supplier review, and sets out the steps, the inputs, the owners, and the evidence each step leaves behind.
2 of 2
A method for standing up an ISO/IEC 27001 management system that produces evidence in daily operation instead of a binder assembled before the audit.
Governance3 Sept 202622 min read
Risk statements that name a source, an event and a consequence; scales that survive argument; and every row closed by a named approver on a dated decision.
Risk3 Sept 202622 min read