3 ms·
ISO27001 I wouldn’t call rigid, most of the stuff you should be doing anyway if you use any software. checking for evidence that you are doing those things I w
by ozim 1y ago
ISO27001 I wouldn’t call rigid, most of the stuff you should be doing anyway if you use any software.
checking for evidence that you are doing those things I would call ridgit. SOC2 as attestation doesn’t require so much documentation.
- sgt 1y agoSure, it depends on the implementation of your ISMS. Ideally you want to follow the control guidance in 27002. They've done a lot of thinking on this.