Artwork

Content provided by Jim. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Jim or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
Player FM - Podcast App
Go offline with the Player FM app!

ISO/IEC TS 27008:2019 - Clause 8.2 - Planning the Assessment

25:12
 
Share
 

Manage episode 422976953 series 3372790
Content provided by Jim. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Jim or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Howard and Jim chat about ISO/IEC TS 27008:2019 - Clause 8.2 - Planning the Assessment: Clauses 8.2.1, 8.2.2 and 8.2.3

POINTS DISCUSSED

  1. ISO/IEC TS 27008:2019 - Clause 8.2 - Planning the Assessment clauses 8.2.1, 8.2.2 and 8.2.3.
  2. Some common misconceptions people have about ISO standards.
  3. The importance of planning when assessing controls. How the "Plan, Do, Check, Act" methodology fits into the assessment process, and why is it crucial.
  4. The risks associated with the auditing process itself, and how can auditors mitigate these risks
  5. How organizations can ensure that their controls are not just being followed but are genuinely effective in managing risks.
  6. The benefits of continuous monitoring, and can organizations implement it effectively.
  7. Reviewing procedures related to controls, and the key elements that should be reviewed to ensure these controls are functioning as intended.
  8. The importance of seeking input from the staff using the controls, and how organizations can create a culture where employees feel comfortable suggesting improvements.

LEARN MORE

Click here to try Conformance1's free online ISO 27001 Gap Checklist.
UPCOMING EPISODES
Howard and Jim continue to deep dive into ISO/IEC TS 27008:2019 - Clause 8.2.4 - Object-Related Procedures, and 8.2.5 - Previous Findings,
NEXT STEPS
Please follow us on your preferred podcast directory. We appreciate your likes & comments, and shares.
Click here to visit the SimplifyISO website to discover how our cloud-based management system will satisfy all the Standards requirements, client requirements, and any other requirements that you have to meet.
Click here to visit the International Management System Institute website, and learn about how and why you should consider becoming a Certified ISO Management System Professional.
Learn more about Jim on LinkedIn & YouTube
LinkedIn
LinkedIn Articles
YouTube
Book Recommendations:

Turn the Ship Around!: A True Story of Turning Followers into Leaders by L. David Marquet
The Checklist Manifesto: How to Get Things Right by Atul Gawande
Learn more about Howard
Click here to learn more about the Coaching and Podcast Services provided by Fox Coaching, inc.
Keywords
ISO 27001, Clause 8.0 Control Assessment Process, Clause 8.2 - Planning the Assessment, Information Security Management Systems, Risk Management, ISO Review Podcast, Jim Moran, Howard Fox
#ISO27001 #InformationSecurityManagementSystems #RiskManagement #Control Assessment Process, #ISOReviewPodcast

  continue reading

49 episodes

Artwork
iconShare
 
Manage episode 422976953 series 3372790
Content provided by Jim. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Jim or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Howard and Jim chat about ISO/IEC TS 27008:2019 - Clause 8.2 - Planning the Assessment: Clauses 8.2.1, 8.2.2 and 8.2.3

POINTS DISCUSSED

  1. ISO/IEC TS 27008:2019 - Clause 8.2 - Planning the Assessment clauses 8.2.1, 8.2.2 and 8.2.3.
  2. Some common misconceptions people have about ISO standards.
  3. The importance of planning when assessing controls. How the "Plan, Do, Check, Act" methodology fits into the assessment process, and why is it crucial.
  4. The risks associated with the auditing process itself, and how can auditors mitigate these risks
  5. How organizations can ensure that their controls are not just being followed but are genuinely effective in managing risks.
  6. The benefits of continuous monitoring, and can organizations implement it effectively.
  7. Reviewing procedures related to controls, and the key elements that should be reviewed to ensure these controls are functioning as intended.
  8. The importance of seeking input from the staff using the controls, and how organizations can create a culture where employees feel comfortable suggesting improvements.

LEARN MORE

Click here to try Conformance1's free online ISO 27001 Gap Checklist.
UPCOMING EPISODES
Howard and Jim continue to deep dive into ISO/IEC TS 27008:2019 - Clause 8.2.4 - Object-Related Procedures, and 8.2.5 - Previous Findings,
NEXT STEPS
Please follow us on your preferred podcast directory. We appreciate your likes & comments, and shares.
Click here to visit the SimplifyISO website to discover how our cloud-based management system will satisfy all the Standards requirements, client requirements, and any other requirements that you have to meet.
Click here to visit the International Management System Institute website, and learn about how and why you should consider becoming a Certified ISO Management System Professional.
Learn more about Jim on LinkedIn & YouTube
LinkedIn
LinkedIn Articles
YouTube
Book Recommendations:

Turn the Ship Around!: A True Story of Turning Followers into Leaders by L. David Marquet
The Checklist Manifesto: How to Get Things Right by Atul Gawande
Learn more about Howard
Click here to learn more about the Coaching and Podcast Services provided by Fox Coaching, inc.
Keywords
ISO 27001, Clause 8.0 Control Assessment Process, Clause 8.2 - Planning the Assessment, Information Security Management Systems, Risk Management, ISO Review Podcast, Jim Moran, Howard Fox
#ISO27001 #InformationSecurityManagementSystems #RiskManagement #Control Assessment Process, #ISOReviewPodcast

  continue reading

49 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Quick Reference Guide