Tag - ISO

Responsible AI: Prioritizing Data Management with ISO 42001

Originally published by Schellman. While the rapid pace at which artificial intelligence (AI) technology has been both developing and impacting several areas of our daily lives continues, so too do the concerns about the tech’s safety, privacy, and bias. As there’s no stopping the ongoing integration of AI, organizations are now wondering what they can do to ease...

Do SOC 2 and ISO 27001 the Right Way with CSA STAR

At the CSA Cloud Trust Summit 2024, CSA’s CEO Jim Reavis gave the presentation “Do SOC 2 and ISO 27001 the right way with CSA STAR.” In this condensed transcript of the presentation, Jim provides an overview of the SOC 2 and ISO 27001 frameworks and how they relate to the CSA STAR program. You can watch Jim’s full presentation here. Two Cardinal Conformance...

Achieving ISO 9001: Key Compliance Strategies

Originally published by Schellman. When seeking ISO 9001 certification, part of that road to compliance will be aligning your required quality management system (QMS) with the key clauses (4-10) within the standard, each of which focuses on a specific facet of that management system—context, leadership, planning, support, operation, performance evaluation, and...

Is Climate Change an Issue for Your ISO Certification?

Originally published by Schellman. On February 23, 2024, ISO (along with the International Accreditation Federation (IAF)) published short amendments to all standards aligned with its Harmonized Structure. In the form of new requirement language and one additional note, ISO has now adapted climate change concerns as considerations for a wide range of popular...

The Importance of Accredited Auditors for ISO 27001

Originally published by BARR Advisory. Written by Cameron Kline, Director, Attest Services, BARR Advisory. As an internationally recognized certification, ISO 27001 is one of the most highly regarded and thorough cybersecurity assessments an organization can undergo. Achieving and maintaining an ISO 27001 certification isn’t something organizations can do on their...