Government, Risk, and Compliance standards, regulations, and best practices explained.
A practical overview of ISO/IEC 27005 as guidance for information security risk management, including risk treatment, monitoring, and its relationship to an ISMS.
An overview of CSA CCM 4.1, its cloud-focused control objectives, the integrated CAIQ, shared responsibility, and practical assessment boundaries.
A guide to NIST’s adaptable security and privacy control catalog, how organizations select and tailor controls, and how to use implementation evidence.
A practical guide to worker participation, hazard identification, risk controls, operational change, incident learning and continual improvement.
A practical guide to environmental aspects, obligations, objectives, operational controls, monitoring, incident readiness and continual improvement.
A practical guide to process ownership, customer requirements, quality objectives, performance evaluation, corrective action and continual improvement.
An overview of the Open FAIR taxonomy and quantitative risk analysis, including loss-event frequency, loss magnitude, uncertainty and decision use.
A practical overview of anti-bribery governance, risk assessment, due diligence, controls, reporting, monitoring and improvement.
A practical guide to organizing privacy information management, roles, data flows, risk assessment, operational evidence and continual improvement.
A risk-prioritized approach to organizing cybersecurity safeguards, ownership, implementation evidence and continuous improvement.
