Category: IT Governance, Risk & Compliance

The General Data Protection Regulation (GDPR) and ISO 27001 fit like hand and glove. As the only auditable international standard that defines the requirements of an Information Security Management System (ISMS), the GDPR encourages the use of this standard. How ISO 27001 works ISO 27001 describes best practice for an ISMS, a systematic approach consisting of…
Read more

What is Third Party Risk Assessment ? A third party risk assessment is an attempt to quantify the risk associated with a third party vendor that’ll be providing a product or service to your organization. Sometimes referred to as vendor risk assessments, these are designed to assist you with analyzing new and ongoing vendor relationships. You always want to gauge the level of risk posed to your organization by…
Read more