Related Posts
Bali recommendations on things to do?
Anyone with insight on Tyson Mendes?
Additional Posts in Cyber Security Bowl
Any tips or tricks for CSX certification?
New to Fishbowl?
Download the Fishbowl app to
unlock all discussions on Fishbowl.
unlock all discussions on Fishbowl.





ISO is a standard and the company will normally hire an auditor to assess the company's polices, procedures and processes against the standard to see if the company is complaint, if the auditor certifies the company as compliant the company can say that it is ISO certifed so it gives some assurance to customers and other third-parties. Service Organization Control (SOC) reports list the objective and the controls the organization has in place to meet the objectives. For a Type I SOC report the auditor will only test the design for a Type II report the auditor will test the operating effectiveness.
Or you would include them in your TPRM program
Mentor
They are frameworks and usually people learn on the job. Getting the standard cyber certs should be all the background you need.
Have your hard of CTPRA?