article thumbnail

How to Comply with FedRAMP: A Practical Guide to Authorization 

Reciprocity

These tools can help centralize policy management and streamline documentation. Consider tools that centralize and streamline the evidence collection process.

article thumbnail

Operational Resilience Self-Assessment: Achieving the March 2022 Deadline

Castellan

In March 2021, The Bank of England, the Prudential Regulation Authority (PRA), and the Financial Conduct Authority (FCA) published policy documents about operational resilience. In terms of self-assessment, regulators do not expect firms to build out a full operational resilience capability ; instead, they are looking for a gap analysis.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Most Overlooked Security Issues Facing the Financial Services

Solutions Review

The rise – and sophistication – of ransomware attacks has been documented by all parties concerned. Please note: usually when the initial gap analysis is done (remember step 1), you end up with a long list of deviations. Cybersecurity and Infrastructure Security Agency (CISA) adds these 3 security issues to its list.”

article thumbnail

ISO 27001 Requirements Checklist: Steps and Tips for Implementation

Reciprocity

How Do You Perform a Gap Analysis? Companies can compare their present information security systems to the criteria of the ISO 27001 standard to determine where gaps might exist, and what should be done to update their business processes to achieve ISO 27001 certification. The ISO 27001 gap analysis does that.

article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Within the ISO 27001 family, there are many other vital documents. Perform a Gap Analysis. A gap analysis gives you a high-level summary of what needs to be done to attain certification and allows you to examine and compare your organization’s current information security arrangements to the ISO 27001 standards.

Audit 52
article thumbnail

‘Third Generation Business Continuity’

Plan B Consulting

This week I travelled to London to attend a meeting with a new client who we are conducting a gap analysis for, based on their present level of business continuity. All of the documents were dutifully updated once a year, but the more technical parts of the BIA had not been touched.

article thumbnail

‘Third Generation Business Continuity’

Plan B Consulting

This week I travelled to London to attend a meeting with a new client who we are conducting a gap analysis for, based on their present level of business continuity. All of the documents were dutifully updated once a year, but the more technical parts of the BIA had not been touched.