Evidencing Cybersecurity Compliance & Control

Evidencing your cybersecurity and information security efforts is more critical than ever but teams are stretched thin trying to keep pace with an expanding web of requirements - from ISO 27001 and NIST to NIS2 and sector-specific regulatory expectations - all while fending off an evolving threat landscape. 0:00 Introduction and why cyber security evidence matters 3:40 Our approach: six pillars of the ISMS 5:04 Governance and management (policies, meetings, tasks) 12:24 Registers (assets, access control, legal and contractual) 14:24 Risk and controls (including control testing) 21:04 Third party risk management 26:30 Incident management 30:11 Audit and assurance 33:14 Key takeaways