Cyber & AI Perspectives — Insights on Cybersecurity and AI Governance

If you’re preparing for ISO 27001 certification, shift your focus from asking “How do we prepare the evidence?” to “Are our security processes actually working?” When risks are properly assessed, controls are appropriate, people know their responsibilities, and controls are consistently performed and monitored, the evidence will largely already exist. Build and strengthen the security processes first, and let the evidence follow - because security is about becoming more secure, not about creating documentation for its own sake.

LINK FROM THE VIDEO
► ISO 27001 Certification: What Will the Auditor Look For? | Interview with Aron Lange | EP36 https://www.youtube.com/watch?v=4HNwmgCiKyU
  • (00:00) - Stop Preparing Evidence for Your ISO 27001 Audit
  • (00:17) - How ISO 27001 Certification Audit Works
  • (01:35) - How Auditors Collect Evidence
  • (02:27) - Three Things Companies Get Wrong
  • (04:04) - “Push” vs “Pull” Approach
  • (04:30) - Evidence Does Not Improve Your Security
  • (05:01) - Build Security Processes Not Evidence
  • (06:14) - Let The Evidence Follow

Creators and Guests

DK
Host
Dejan Kosutic
CEO at Advisera & Cybersecurity and AI governance expert

What is Cyber & AI Perspectives — Insights on Cybersecurity and AI Governance?

Cyber & AI Perspectives is a podcast for cybersecurity and AI governance professionals, covering the most important trends, risks, and strategic developments shaping organizations today.

Hosted by Dejan Kosutic, one of the leading experts in cybersecurity and AI governance, each episode delivers deep insights and independent analysis you are unlikely to hear elsewhere — helping you understand what matters now and what is coming next.

To provide feedback or suggest topics for future episodes, contact us at: podcast@advisera.com