As we approach the two-year milestone since ISO 42001 was first published as an International Standard, one question looms large: is the industry keeping pace with the near-constant stream of new GPT model releases? David Forman, CEO of Mastermind, joins Compliance Pointers to take stock of ISO42001 adoption and reveal emerging trends fueled by the growing spotlight on AI governance.

Watch this episode to learn:

• Current stats for ISO 42001 certificate issuances
• Pitfalls when conducting AI system impact assessments
• Risks associated with model hallucinations
• Shared responsibility model between AI producers and AI providers

Learn more about Mastermind at: https://mastermindassurance.com/

Learn more about CompliancePoint's ISO 42001 certification services at https://www.compliancepoint.com/services/information-security/iso-42001-certification/

Texas SB 140 takes effect on September 1st, bringing significant risks to businesses making calls into Texas. Kevin Mayfield joined Compliance Pointers to break down why the changes create more risk for telemarketing organizations and how they can mitigate that risk. Watch the entire episode to learn:

📱 What’s in Texas SB 140

📱 Enforcement Changes and Private Right of Action

📱 Telemarketer Registration and Exemptions in Texas

📱 Recommendations for Compliance in Texas

Learn more about CompliancePoint's Marketing Compliance Services at https://www.compliancepoint.com/services/marketing-compliance/

In the McLaughlin case, SCOTUS ruled that federal district courts are not bound to follow FCC interpretations of the #TCPA in private lawsuits. Tony Jarnigan joined Compliance Pointers to explain the impact the case has already had and how it could change the telemarketing litigation landscape in the future. Watch the complete episode to learn:

👨‍⚖️ Details of the McLaughlin ruling

👨‍⚖️ Conflicting text messaging rulings at the district court level

👨‍⚖️ Other FCC interpretations that could be questioned

👨‍⚖️ Compliance strategies for the evolving landscape

Learn more about CompliancePoint's Marketing Compliance Services here: https://www.compliancepoint.com/services/marketing-compliance/

Being issued a new ISO certificate is certainly a milestone, but it's just the beginning. When applied correctly, implementing standards like ISO 27001, ISO 27701, and ISO 42001 should influence overall business operations, like regular KPI reporting, too. David Forman, CEO at Mastermind, joined Compliance Pointers to explain how some of his team’s clients get the most value from their management systems. Topics from this episode:

· How to leverage ISO as a catalyst for business innovation

· How building a management system extends beyond creating a few controls

· Real proof points of certified clients that have taken ISO certificates to the next level

· Status update on the upcoming major revision to ISO 27701

Learn more about Mastermind at: https://mastermindassurance.com/

CompliancePoint offers many ISO certification services, visit the following web pages to learn more:

https://www.compliancepoint.com/services/information-security/iso-27001-certification/

https://www.compliancepoint.com/services/information-security/iso-27701-certification/

https://www.compliancepoint.com/services/information-security/iso-42001-certification/

Many businesses are using GRC tools to prepare for audits and improve the overall efficiency of their compliance programs. Brandon Breslin joined Compliance Pointers to explain how organizations can identify the best tool for them and maximize its value. Watch the entire episode to learn about:

🔧 Considerations when selecting a GRC tool

🔧 Benefits of leveraging GRC tools

🔧 Effective implementation

🔧 #AI in GRC tools

Learn more about CompliancePoint's Cybersecurity services here: https://www.compliancepoint.com/services/cyber-security/

Learn more about our InfoSec Certification services here: https://www.compliancepoint.com/services/information-security/

Penetration testing is an important element of a cybersecurity program. Pen testing is also a compliance requirement for standards like HIPAA, PCI, and FISMA. There are some common mistakes businesses make that can hurt the efficiency and effectiveness of a test. We break down these mistakes on the latest episode of Compliance Pointers. Click the link in the comments to see the entire episode and learn about:

💻Defining the scope

💻Tools and techniques in #pentesting

💻Testing environments

💻Phishing and Social Engineering

💻Post-test remediation and documentation challenges

Learn more about CompliancePoint's Penetration Testing Services at https://www.compliancepoint.com/services/cyber-security/penetration-testing/

What are the most important items to look for when reading a SOC 2 report? Carol Amick joined Compliance Pointers to answer that question. Watch the entire episode and learn about:

📃 The key components - management's assertion, controls, and exceptions

📃 Analyzing the controls

📃 Understanding exceptions

📃 Verifying the quality of the report

Learn more about CompliancePoint's SOC 2 services at: https://www.compliancepoint.com/services/information-security/soc2-compliance/

Michael Young, a partner at Morris, Manning, and Martin, who focuses on the intersection of data, tech, privacy, and cybersecurity, joined Compliance Pointers to break down AI laws that are in effect at the state level. Watch the complete episode to learn about:

⚖️ Existing state laws and their requirements

⚖️ The risks those laws create for businesses implementing #artificialintelligence into products and services

⚖️ First steps businesses can take for compliance

Learn more about Michael Young here: https://www.mmmlaw.com/people/michael-young/

and Morris, Manning & Martin here: https://www.mmmlaw.com/

Learn more about CompliancePoint's data privacy and cybersecurity services at https://www.compliancepoint.com/

The number of TCPA lawsuits continues to increase in 2025. Alexandra Krasovec, Partner at Manatt, Phelps & Phillips, LLP, who specializes in TCPA cases, joined Compliance Pointers to give us an insider look at what’s currently driving these cases. Watch the entire episode to hear Alex’s take on:

⚖️ The most common violations plaintiffs are leveraging for suits

⚖️ Identifying and managing the risks your third-party vendors can create

⚖️ The importance of internal #DoNotCall lists

⚖️ #Telemarketing best practices for mitigating lawsuit risks

⚖️ How to respond when facing a lawsuit

⚖️ How the McLaughlin #SCOTUS ruling could impact the TCPA

Learn more about CompliancePoint's TCPA Compliance Services here: https://www.compliancepoint.com/services/marketing-compliance/tcpa-compliance/

Learn more about Alex (https://www.manatt.com/alexandra-n-krasovec) and Manatt's services: https://www.manatt.com/

Where do organizations with HITRUST certification plans begin? We answer that question in this episode of Compliance Pointers. Listen to the entire episode to learn more about:

✅ Choosing the Right HITRUST Certification

✅ The Role of a HITRUST Auditor

✅ Selecting the Right Audit Partner

✅ Preparing for Your HITRUST Assessment

Learn more about CompliancePoint's HITRUST certification services at: https://www.compliancepoint.com/services/healthcare/hitrust-certification/