Remove 2013 Remove Evaluation Remove Hazard
article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Your primary reference points will be ISO/IEC 27001:2013, ISO/IEC 27002:2013, and ISO/IEC 27000:2018. Doing this right is critical because a scope that is too large will increase the project’s time and expense, and a scope that is too narrow may expose your firm to unanticipated hazards. Evaluating risks.

Audit 52
article thumbnail

Risk Assessments and Internal Controls

Reciprocity

COSO first published its internal control framework in 1992, followed by a modern-day overhaul in 2013. They include fraud, security failure, legal breaches, environmental hazards, or natural disasters. Findings and discrepancies should be evaluated and corrective actions or controls implemented to ensure problems are resolved.

Audit 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Top Risk Analysis Tools

Reciprocity

1, Guide for Conducting Risk Assessments ; International Standardization Organization’s (ISO) ISO/IEC 27001:2013, Information Security Management ; And to supplement this framework, ISO also created ISO/IEC 27005:2018, Information Technology – Security Techniques – Information Security Risk Management.

article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

Not long ago, risk managers concerned themselves mainly with hazards such as fires and floods; or in the financial sector, loan defaults (credit risk). COSO’s ERM framework builds upon, and is intended to work with, the committee’s internal control framework issued in 1992 and updated in 2013. Are there differences at all?

article thumbnail

Risky Business: Is Looking at Likelihood a Waste of Time?

Plan B Consulting

In the 2010 and 2013 GPGs we looked at threat assessments, whereas in the more recent 2018 GPG, we cover a threat and risk assessment. Your building could be state of the art, brand new and with lots of features in place to prevent a fire, or it could be old, rickety, with poor wiring and a fire hazard just waiting to happen.

article thumbnail

Risky Business: Is Looking at Likelihood a Waste of Time?

Plan B Consulting

In the 2010 and 2013 GPGs we looked at threat assessments, whereas in the more recent 2018 GPG, we cover a threat and risk assessment. Your building could be state of the art, brand new and with lots of features in place to prevent a fire, or it could be old, rickety, with poor wiring and a fire hazard just waiting to happen.