Government, Risk, and Compliance standards, regulations, and best practices explained.
How NIST’s RMF connects organizational and system-level security and privacy risk through preparation, control selection, authorization and continuous monitoring.
How ISO/IEC 27002 supports the selection and implementation of information security controls within an organization’s risk and management-system context.
How organizations can use Govern, Map, Measure and Manage to incorporate trustworthiness considerations into AI risk management.
A practical overview of an AI management system, organizational context, accountability, risk assessment, operational controls and continual improvement.
An overview of the AICPA Trust Services Criteria, SOC 2 examinations, scope, evidence and the difference between an attestation report and certification.
How the IIA standards structure internal auditing through purpose, ethics, governance, management and service delivery.
ISO 37301 specifies requirements and guidance for establishing, evaluating and improving a compliance management system suited to organizational obligations and risks.
ISO/IEC 27001 specifies requirements for establishing, maintaining and improving an ISMS whose scope and risk treatments are defined in organizational context.
COSO ICIF organizes internal control around objectives, components and principles to help assess whether controls are designed and operate as an integrated system.
ISO 31010 guides the selection and application of risk assessment techniques according to the decision, context, evidence and uncertainty.
