Information security management
13
MENTIONS
8
EPISODES
8
PODCASTS
Search complete. 13 mentions across 8 episodes found for "Information security management".
Sep 23, 2026
Robin Van AekenGUEST
Firstly, is there's all of the typical stuff that gives big enterprises comfort that even though you're a young startup when you launched in July last year, you've got everything that they would expect to have.
Robin Van AekenGUEST
So everything you've got around your SLAs and you've got the ISMS set up correctly so that you've got the information security and the data handled and you've got the right encryption and your ways of processing and handling data are fully, fully secure.
Robin Van AekenGUEST
So some of the ways that we make that a bit easier at Magentic is we say everyone has a single tenant deployment on a specific cloud.
Robin Van AekenGUEST
We often deploy on the clouds of our customer's side themselves, sometimes via a direct link so that no data even touches the open internet.
Dejan KosuticHOST
Okay, so let's kind of move the topic to, let's say, more kind of implementation issues.
Dejan KosuticHOST
So do you think that a company can run, let's say, one security system, whatever it's called, I don't know, ISMS or something else that actually covers several standards? So is it possible actually to...
Dejan KosuticHOST
integrate everything into one system and then run it as
Aaron LangeGUEST
such? Absolutely.
12 MINS LATER
Aaron LangeGUEST
So that was a very positive case.
Dejan KosuticHOST
Are you saying that it's actually easier to implement C5 if you already have 27001 as a base?
Aaron LangeGUEST
Absolutely, and the striking part is also if you open up the C5 catalog, which I'm sure you will after this session, the very, very first requirement of C5 is to have an ISMS in accordance with ISO 27001.
Aaron LangeGUEST
That's the first requirement.
George RyanGUEST
Yeah, so I guess like Jack says, probably best to Split this up as well, isn't it, into tailoring training and then tailoring the awareness courses as such as well.
George RyanGUEST
So in terms of the tailoring, the training, it's, again, like Jack mentioned, if you've got an ISMS, then, well, actually, if you're training someone, you're going to want stuff that is ISO-focused as well.
George RyanGUEST
If you go train them on a completely different framework, like PCI DSS, but you're looking at actually your ISO, then potentially that's not going to be the most relevant.
George RyanGUEST
Same way like you will find when you're doing PCI DSS, which anyone not aware is the payment card industry data security standard.
Christopher ScottHOST
So I want to talk about ISO 27001 for a moment, Agata.
Christopher ScottHOST
The standard defines how to build an information security management system, the ISMS.
Christopher ScottHOST
It requires context definition, risk assessment, control implementation, performance evaluation, and continuous improvement.
Agata LewkowskaHOST
Yes, exactly.
Sarah NicastroHOST
Mm-hmm.
Aymen GatriGUEST
There is quality management system, there is ISMS, information security management system, and so on.
Aymen GatriGUEST
What is very important now, exactly in the strategy of implementing AI, we have a strategy, also quality or management system for AI, similar to the quality management system, to the ISMS, the environmental management system, to all these management system.
Aymen GatriGUEST
So when organization are able to build the governance of management systems for the AI at corporate level, from the highest level, from the management to the usage at the lowest level, that will minimize hugely the risk and give guidelines how you can implement, positively benefit in minimizing the risk.
Sarah NicastroHOST
Yeah, that makes sense.
Jackie BaekGUEST
In practice, it first has to define its business model and confirm whether it falls within the filing requirements.
Jackie BaekGUEST
It then needs to establish ISMS certification and AMA organization and internal controls KYC and suspicious transaction reporting system, appropriate IT infrastructure and sound governance.
Jackie BaekGUEST
The company then submits its filing, respond to request for further information, undergoes fit and proper review, and made based on on-site inspection.
Jackie BaekGUEST
So this is not a one-time paperwork exercise.
speaker_0HOST
But how do we guarantee this incredibly sophisticated machine doesn't eventually just break down and turn back into digital dust?
speaker_1HOST
The linchpin of this entire ecosystem is how CISO.D links the Pillar01 compliance operating system with a continuous database they call the Living ISMS or Information Security Management System.
speaker_1HOST
This database automatically tracks the age and validity of your compliance evidence.
speaker_0HOST
How does that decay mechanism work in practice?
Heather ReedGUEST
factory employees, and they were running at 115% capacity all the time.
Heather ReedGUEST
And so when our mothership company said, hey, you have to be part of the ISMS, they gave a lot of pushback.
Heather ReedGUEST
And it took a lot of relationship building to get to the point where they trusted me well enough to know that that ISMS was not going to be a burden on them.
Heather ReedGUEST
That's what they were worried about.
Heather ReedGUEST
We don't have time for more work.
Heather ReedGUEST
I had visibility to obviously the incidents that were occurring.
Heather ReedGUEST
So I just started approaching it from more of like what I can do for you instead of what you can do for me.
Heather ReedGUEST
So, you know, I volunteered to have my team take on the heavy lifting of getting them into the ISMS, making sure that everything was documented.