As the standards for information security management evolve, so does the need for organisations to adapt and maintain their ISO 27001 certification. The recent updates to ISO 27001:2022 and ISO 27006 introduce significant changes that affect the certification landscape, emphasising the need for a strategic approach to compliance and certification maintenance.
Delivered by Andrew Pattison, an authority on information security and compliance, this webinar provides essential insights into the latest developments in ISO 27001 and ISO 27006. You will learn about the implications of these changes for certification and discover practical strategies for transitioning to the updated standards while ensuring ongoing compliance.
Webinar Agenda
This webinar covers the following:
- What’s new in ISO 27001:2022 and ISO 27006, and how the changes affect your certification.
- How ISO 27001:2022 affects organisations starting their implementation project.
- The transition strategy for organisations upgrading from ISO 27001:2013.
- Practical tips for planning and meeting ISO 27001 deadlines.
- Leveraging CyberComply to simplify compliance and audit management.
Q&A session
In the last 15 minutes, you’ll have the opportunity to engage directly with our ISO 27001 expert in a live Q&A to clarify any uncertainties about your ISO 27001 project.
Delivered by
Andrew Pattison
Head of GRC Consultancy Europe
Andrew is a distinguished consultant with more than two decades of experience in the UK health sector. His background includes pivotal roles such as IT manager at a large health trust in Northern Ireland and information security manager for a specialist telehealth supplier. An active member of ISACA®, BCS and CSA, Andrew’s expertise spans information security, change management, business continuity and project management. His qualifications include an MSc in Information Systems Management, alongside certifications in Information Security Management Principles (CISMP), Certified Information Security Lead Implementer (CIS LI), Certified Information Security Lead Auditor (CIS LA) and PRINCE2® Project Management.
Andrew’s notable achievements include developing, implementing and managing a certified ISO 27001 ISMS, managing the integration of two ISO 27001:2013 ISMS projects post-acquisition, and leading security for the implementation of secure videoconferencing services within the UK health service.