ISO 27001 1 big thing: Prioritize security projects based on costs, benefits, resources, and alignment with business goals.

528 words, 2.0 minutes read. ISO 27001 1 big thing: Prioritize security projects based on costs, benefits, resources, and alignment with business goals. The big picture: Guarantee your organization works with the legal department and the sourcing office to ensure that appropriate security and privacy requirements are included in contracts. Read more…

ISO 27001 1 big thing: Provide technical knowledge/expertise to support the design and implementation of system components/subsystems.

547 words, 2.0 minutes read. ISO 27001 1 big thing: Provide technical knowledge/expertise to support the design and implementation of system components/subsystems. The big picture: Lead the execution of the security assessment of specific technical areas of a project, supervising other team members, and coaching/teaching/mentoring where necessary. Why it matters: Read more…

ISO 27001 1 big thing: Monitor and respond to security events providing notification, analysis, forensics and reviews.

547 words, 2.0 minutes read. ISO 27001 1 big thing: Monitor and respond to security events providing notification, analysis, forensics and reviews. The big picture: Work effectively with business units to facilitate information security risk assessment and risk management processes, and empower them to own and accept the level of Read more…

ISO 27001 1 big thing: Lead security incidents in a cross functional collaboration environment driving towards incident resolution.

601 words, 2.2 minutes read. ISO 27001 1 big thing: Lead security incidents in a cross functional collaboration environment driving towards incident resolution. The big picture: Warrant that your organization is understanding or previous involvement working with risk management and compliance frameworks as NIST, ISO 27001, PCI, GDPR, etc. Why Read more…

ISO 27001 1 big thing: Review, implement, update and document enterprise wide information security policies and procedures.

602 words, 2.2 minutes read. ISO 27001 1 big thing: Review, implement, update and document enterprise wide information security policies and procedures. The big picture: Ensure your expertise lies in architecture and engineering, and you understand the key relationships throughout the system including the importance of awesome user involvement. Why Read more…