Using your ISO 9001 Management System to Simplify CMMC Certification

The Virtual CISO Podcast · Apr 28, 2021 · 47m

John Laffey, Program Manager at Perry Johnson Registrars, Inc. discusses the cornerstones of an information security management system from the perspective of a management system auditor. - Context: the boundaries, the scope, the data, the people, the systems, and the stakeholders, - Leadership: driving the entire process, continuing to champion it and making sure resources are available. - Planning: documented processes, risk assessment and risk management

(Change = risk) - Support: budget, continuing training competencies, determining what is the required competencies, and then ensuring…