IT Audit & Compliance

ISO 27001 compliance controls in the 2022 edition: legal and contract requirements, IP rights, records, privacy, independent reviews and checks.

ISO 27001 business continuity under the 2022 edition: security during disruption, ICT readiness, redundancy, RTO and RPO, testing and audit evidence.

Information security incident management under ISO 27001:2022: planning, event reporting, triage, response, lessons learned and evidence collection.

Manage ISO 27001 supplier relationships under the 2022 edition: supplier policy, contract clauses, ICT supply chain, monitoring and cloud services.

ISO 27001 secure development under the 2022 edition: security requirements, secure SDLC, architecture, secure coding, testing, outsourcing and test data.

ISO 27001 communications security under the 2022 edition: network security, network services, segregation, web filtering, information transfer and NDAs.

ISO 27001 operations security under the 2022 edition: procedures, change and capacity management, malware, backups, logging, patching and monitoring.

ISO 27001 physical security under the 2022 edition: perimeters, entry, monitoring, environmental threats, equipment, clear desk and secure disposal.