SSIS Certifications2h ago · 4 min readCERT-In’s 6-Hour Rule and ISO 27001: Logging and Incident Controls Engineers Can BuildCERT-In's 2022 directions require covered entities in India to report specified cyber incidents within six hours of noticing them and to keep ICT logs for a rolling 180 days. ISO/IEC 27001:2022 doesn'sis-cert.hashnode.dev
BBitkosh Technologies1d ago · 5 min readCrafting Incident Response Plans that Fulfill ISO 27001 and SOC 2Introduction In today's digital landscape, organizations must prioritize security and compliance to safeguard sensitive information. Both ISO 27001 and SOC 2 are critical frameworks that help organizabitkosh.hashnode.dev
SSIS Certifications2d ago · 3 min readISO 27001 or SOC 2 First? A Decision Guide for Ethiopian Software and Outsourcing TeamsCMMI, ISO/IEC 27001:2022 and SOC 2 answer different buyer questions. CMMI appraises how well you deliver, ISO 27001 certifies an information security management system, and SOC 2 is an attestation repsis-cert.hashnode.dev
JJeji James3d ago · 4 min readBuilding an Information Security Risk Assessment Project: A Practical GRC Case StudyIntroduction As part of my journey into cybersecurity, I wanted to explore the Governance, Risk and Compliance (GRC) side of information security through a practical project. Rather than focusing onlyjeji-james.hashnode.dev
BBitkosh Technologies4d ago · 5 min readAsset Inventory: The Cornerstone of Security FrameworksIntroduction In the realm of information security and compliance, the foundation to a robust security posture begins with an asset inventory. While many organizations recognize the importance of policbitkosh.hashnode.dev
118xBanSep 26 · 15 min readGovernance Roles and Responsibilities// @18xBan · GRC Series · Chapter 15 Who decides, who does, who signs, and who covers when they're away. Monday, 9:15 AM: one name, 5 Boxes Gotham Mutual's contract arrives with a security schedule18xban.hashnode.dev
118xBanSep 25 · 14 min readRisk Appetite vs Risk Tolerance // @18xBan · GRC Series · Chapter 14 Capacity, appetite, tolerance, trigger. Only one of them is a number. Tuesday, 10:40 AM: "Is that OK?" Priya's team wants to ship a product analytics SDK. It's 18xban.hashnode.dev
118xBanSep 23 · 13 min readManagement Review: Running the Meeting That Matters// @18xBan · GRC Series · Chapter 13 7 inputs in, decisions out, and a document that survives an audit. Monday, 11:00 AM: "When was your last management review?" The firm Maya funded for the intern18xban.hashnode.dev
118xBanSep 17 · 15 min readAsset Inventory: From Unknown to Auditable@18xBan · GRC Series · Chapter 03 Seven accounts, 203 computers, 171 spreadsheet rows, and nobody who could say what any of it was. Monday, 10:07 AM: "Closing it today, cool?" Last Friday, Maya app18xban.hashnode.dev
118xBanSep 16 · 14 min readScoping Your ISMS: The Decision That Sets Your Audit Cost// @18xBan · GRC Series ·Chapter 02 One line on one page decides what an auditor will look at: the scope. Monday, 8:52 AM Dan Okafor leans into your doorway holding his phone like it's good news. "18xban.hashnode.dev
