Search a title or topic

Over 20 million podcasts, powered by 

Player FM logo
Artwork

Content provided by Jim. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Jim or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Player FM - Podcast App
Go offline with the Player FM app!

Assessing ISO 27001 Annex A Controls Using Practical Review Methods from Clause 7 in ISO 27008

40:13
 
Share
 

Manage episode 523428592 series 3372790
Content provided by Jim. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Jim or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Welcome to another episode of the ISO Review Podcast, brought to you by Simplify ISO! In this installment, hosts Jim Moran and Howard Fox dive deep into Clause 7 of ISO 27008, unpacking practical review methods for assessing the effectiveness of Annex A controls under ISO 27001.

Whether you're an internal auditor looking to sharpen your skills or someone new to information security management, this episode offers invaluable insights into process analysis, documentation reviews, interviews, technical testing, and more. Jim and Howard explore the importance of objectivity, consistency, and tailoring audit methods to an organization’s specific risks and needs. You’ll also hear real-world anecdotes and advice for building rapport, leveraging flowcharts, and achieving meaningful, repeatable assessments that truly protect your data—plus a preview of what’s next as they tee up the next episode’s focus on controlling assessment methods.

DISCUSSION

00:00 ISO 27001 Annex A Assessment

05:15 "Objectivity and Repeatability in Auditing"

10:30 "Evaluating and Improving Controls"

14:25 "Streamlining Audits with Collaboration"

17:26 Training Effectiveness Needs Review

19:12 "Effective Auditing Methods"

23:53 Auditing Controls: Skills and Risks

27:07 AI Power Risks and Controls

29:11 Control Verification: Avoiding Risk

34:09 Advanced Testing Methods Overview

38:05 ISO Podcast: Clause Reviews & Resources

NEXT STEPS
We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional.

Conformance1's free online Gap Checklists:
ISO 9001 - https://conformance1.com/iso9001-gap-assessment-register/
ISO 27001 - https://conformance1.com/iso-27001-gap-checklist-dashboard/
Learn more about Jim on LinkedIn & YouTube.
LinkedIn
LinkedIn Articles
YouTube
Learn about Howard's Coaching and Podcast Services onhis website at https://foxcoaching.com or on LinkedIn at https://www.linkedin.com/in/foxcoachinginc/

KEYWORDS

ISO 27008, Information Security Controls, Information Security Management System, ISO Review Podcast, SimplifyISO, Podcast

#ISO27008 #InformationSecurityControls #InformationSecurityManagementSystem #ISOReviewPodcast #SimplifyISO #Podcast

  continue reading

72 episodes

Artwork
iconShare
 
Manage episode 523428592 series 3372790
Content provided by Jim. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Jim or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Welcome to another episode of the ISO Review Podcast, brought to you by Simplify ISO! In this installment, hosts Jim Moran and Howard Fox dive deep into Clause 7 of ISO 27008, unpacking practical review methods for assessing the effectiveness of Annex A controls under ISO 27001.

Whether you're an internal auditor looking to sharpen your skills or someone new to information security management, this episode offers invaluable insights into process analysis, documentation reviews, interviews, technical testing, and more. Jim and Howard explore the importance of objectivity, consistency, and tailoring audit methods to an organization’s specific risks and needs. You’ll also hear real-world anecdotes and advice for building rapport, leveraging flowcharts, and achieving meaningful, repeatable assessments that truly protect your data—plus a preview of what’s next as they tee up the next episode’s focus on controlling assessment methods.

DISCUSSION

00:00 ISO 27001 Annex A Assessment

05:15 "Objectivity and Repeatability in Auditing"

10:30 "Evaluating and Improving Controls"

14:25 "Streamlining Audits with Collaboration"

17:26 Training Effectiveness Needs Review

19:12 "Effective Auditing Methods"

23:53 Auditing Controls: Skills and Risks

27:07 AI Power Risks and Controls

29:11 Control Verification: Avoiding Risk

34:09 Advanced Testing Methods Overview

38:05 ISO Podcast: Clause Reviews & Resources

NEXT STEPS
We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional.

Conformance1's free online Gap Checklists:
ISO 9001 - https://conformance1.com/iso9001-gap-assessment-register/
ISO 27001 - https://conformance1.com/iso-27001-gap-checklist-dashboard/
Learn more about Jim on LinkedIn & YouTube.
LinkedIn
LinkedIn Articles
YouTube
Learn about Howard's Coaching and Podcast Services onhis website at https://foxcoaching.com or on LinkedIn at https://www.linkedin.com/in/foxcoachinginc/

KEYWORDS

ISO 27008, Information Security Controls, Information Security Management System, ISO Review Podcast, SimplifyISO, Podcast

#ISO27008 #InformationSecurityControls #InformationSecurityManagementSystem #ISOReviewPodcast #SimplifyISO #Podcast

  continue reading

72 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright
Listen to this show while you explore
Play