In this episode, Jacob speaks with ISO 27001 expert Aron Lange!

Aron is the founder of the GRC Lab, and a Udemy instructor with more than 11,000 students! He is an experienced auditor for management systems based on ISO 27001, ISO 9001, ISO 27018 and ISO 22301.

In this episode they discuss the essentials of ISO 27001 including the history of the standard and the changes in the latest revision, but also the significance of the organizations involved and the danger of ISO “certification paper mills.”

Here are some highlights from the episode:

• The history of ISO 27001
• Changes in ISO 27001:2022
• Who are the IAF, accreditation bodies, and certification bodies?
• The importance of hiring an IAF affiliated certification body
• ISO scoping
• Maintaining an ISO certification
• Best practices for internal audits

Follow Aron on LinkedIn: https://www.linkedin.com/in/aronlange/

Aron’s Udemy courses: https://www.udemy.com/user/aron-lange/

Aron’s Website: https://www.aronlange.com/

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s1-e23&utm_campaign=courses

Need a FedRAMP authorized Password Manager?

Start a free 14-day trial of Keeper: https://grcacademy.io/ref/keeper/b2b-trial/

See the CMMC controls that Keeper meets: https://grcacademy.io/ref/keeper/cmmc-controls-sheet/