Neil Bowers (‎NEILB‎)

ThamesValley.pm

Not scheduled yet.

Lightning talk

Any

English 

ISO 27001 is an information security standard, that helps a company define an Information Security Management System, or ISMS. In the world of GDPR and daily public data breaches, if you're processing personal data then you should at least be aware of ISO 27001, and compliance might be required sooner than you expect.

Last year I gave a lightning talk on what it took for my company to be certified for ISO 27001, after customers started requiring it. We had just gone through our final audit for certification a few days before LPW 2018.

In this talk I'll start off with a quick intro to ISO 27001 and how you get certified. Then I'll describe what the first year has like, and the things you need to do to hold on to your certificate. 

catharsis