The ISO Review Podcast copertina

The ISO Review Podcast

The ISO Review Podcast

Di: Jim
Ascolta gratuitamente

3 mesi a soli 0,99 €/mese

Dopo 3 mesi, 9,99 €/mese. Si applicano termini e condizioni.

A proposito di questo titolo

The ISO Review Podcast is a production of SimplifyISO. In each episode, we share the latest International Standards Development, and is your resource for getting the most out of your management systems. Your podcast hosts are Howard Fox & Jim Moran. Howard is a Business Coach and Host of the Success InSight Podcast. Jim is an ISO Management System Professional, celebrating 30-plus years delivering ISO support.

© 2025 The ISO Review Podcast
Economia Gestione e leadership Management
  • ISO 27008: Preparing and Planning for IS Management System Assessments - Clauses 8.3 & 8.4
    Jan 20 2026

    Welcome to the ISO Review Podcast! In this first episode of the New Year, hosts Howard Fox and ISO Management System professional Jim Moran dive into the guiding principles of ISO 27008, focusing on clauses 8.3 Conduction reviews and 8.4 Analysis and reporting results.

    Together, Howard Fox and Jim Moran unravel the best practices for conducting interviews, gathering and evaluating evidence, and ensuring your controls are truly effective. Whether you’re new to ISO standards or a seasoned professional, you’ll learn the keys to successful internal audits, tips for leveraging AI effectively and responsibly, and ways to keep your management system both simple and impactful.

    DISCUSSION

    00:00 "AI Guidance and New ISO Standards"

    05:39 "Reviewing Information Security Controls"

    07:57 "Assessing Control Effectiveness"

    11:27 Audit Evidence and Documentation Overview

    18:00 "Auditing for Risk Management Improvement"

    20:13 Cybersecurity Auditing and Compliance Standards

    25:59 Documentation and Risk Connection

    29:30 "AI Tools & Management Systems"

    NEXT STEPS

    We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional.

    Conformance1's free online Gap Checklists:
    ISO 9001 - https://conformance1.com/iso9001-gap-assessment-register/
    ISO 27001 - https://conformance1.com/iso-27001-gap-checklist-dashboard/

    Learn more about Jim on LinkedIn & YouTube.

    LinkedIn
    LinkedIn Articles
    YouTube

    Learn about Howard's Coaching and Podcast Services onhis website at https://foxcoaching.com or on LinkedIn at https://www.linkedin.com/in/foxcoachinginc/

    KEYWORDS

    ISO 27008, Information Security Controls, Information Security Management System, ISO Review Podcast, SimplifyISO, Podcast

    #ISO27008 #InformationSecurityControls #InformationSecurityManagementSystem #ISOReviewPodcast #SimplifyISO #Podcast

    Mostra di più Mostra meno
    32 min
  • ISO 27008: Preparing and Planning for IS Management System Assessments - Clause 8
    Dec 23 2025

    Welcome to the ISO Review Podcast! In this year-end episode, hosts Howard Fox and ISO Management System professional Jim Moran dive into the guiding principles of ISO 27008, focusing on clause 8—the heart of assessing controls for information security.

    This episode explores the importance of thorough preparations and tailored planning for control assessments, drawing on real-world experience and highlighting the necessity of clear communication, risk-based thinking, and evidence-based decision making. Whether you’re new to ISO 27008 or refining your organization’s approach, you’ll find actionable insights on preparing your team, setting objectives, and understanding the scope and criteria of your audit—all crucial for building confidence in your results.

    DISCUSSION

    00:00 "ISO Review Podcast Highlights"

    05:08 "Preparing for Effective Audits"

    09:45 Audit Preparation and Planning Tips

    12:43 Risk Management and Standards Compliance

    14:33 "Focused Audit and Control Reviews"

    22:03 "Information as an Asset"

    24:34 Flexible Review Process Extension

    30:12 Management Review and Documentation

    31:25 Purposeful, Clear, Evidence-Based Reviews

    NEXT STEPS

    We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional.

    Conformance1's free online Gap Checklists:
    ISO 9001 - https://conformance1.com/iso9001-gap-assessment-register/
    ISO 27001 - https://conformance1.com/iso-27001-gap-checklist-dashboard/

    Learn more about Jim on LinkedIn & YouTube.

    LinkedIn
    LinkedIn Articles
    YouTube

    Learn about Howard's Coaching and Podcast Services onhis website at https://foxcoaching.com or on LinkedIn at https://www.linkedin.com/in/foxcoachinginc/

    KEYWORDS

    ISO 27008, Information Security Controls, Information Security Management System, ISO Review Podcast, SimplifyISO, Podcast

    #ISO27008 #InformationSecurityControls #InformationSecurityManagementSystem #ISOReviewPodcast #SimplifyISO #Podcast

    Mostra di più Mostra meno
    38 min
  • Assessing ISO 27001 Annex A Controls Using Practical Review Methods from Clause 7 in ISO 27008
    Dec 9 2025

    Welcome to another episode of the ISO Review Podcast, brought to you by Simplify ISO! In this installment, hosts Jim Moran and Howard Fox dive deep into Clause 7 of ISO 27008, unpacking practical review methods for assessing the effectiveness of Annex A controls under ISO 27001.

    Whether you're an internal auditor looking to sharpen your skills or someone new to information security management, this episode offers invaluable insights into process analysis, documentation reviews, interviews, technical testing, and more. Jim and Howard explore the importance of objectivity, consistency, and tailoring audit methods to an organization’s specific risks and needs. You’ll also hear real-world anecdotes and advice for building rapport, leveraging flowcharts, and achieving meaningful, repeatable assessments that truly protect your data—plus a preview of what’s next as they tee up the next episode’s focus on controlling assessment methods.

    DISCUSSION

    00:00 ISO 27001 Annex A Assessment

    05:15 "Objectivity and Repeatability in Auditing"

    10:30 "Evaluating and Improving Controls"

    14:25 "Streamlining Audits with Collaboration"

    17:26 Training Effectiveness Needs Review

    19:12 "Effective Auditing Methods"

    23:53 Auditing Controls: Skills and Risks

    27:07 AI Power Risks and Controls

    29:11 Control Verification: Avoiding Risk

    34:09 Advanced Testing Methods Overview

    38:05 ISO Podcast: Clause Reviews & Resources

    NEXT STEPS

    We appreciate your likes & comments, and shares. Click here to visit the SimplifyISO website. Click here to visit the International Management System Institute website and learn how to become a Certified ISO Management System Professional.

    Conformance1's free online Gap Checklists:
    ISO 9001 - https://conformance1.com/iso9001-gap-assessment-register/
    ISO 27001 - https://conformance1.com/iso-27001-gap-checklist-dashboard/

    Learn more about Jim on LinkedIn & YouTube.

    LinkedIn
    LinkedIn Articles
    YouTube

    Learn about Howard's Coaching and Podcast Services onhis website at https://foxcoaching.com or on LinkedIn at https://www.linkedin.com/in/foxcoachinginc/

    KEYWORDS

    ISO 27008, Information Security Controls, Information Security Management System, ISO Review Podcast, SimplifyISO, Podcast

    #ISO27008 #InformationSecurityControls #InformationSecurityManagementSystem #ISOReviewPodcast #SimplifyISO #Podcast

    Mostra di più Mostra meno
    40 min
Ancora nessuna recensione