Latest / Secure & Simple — Podcast for Consultants and CISOs on Cybersecurity Governance and Compliance
How to Integrate Security Controls Across ISO 27001, NIST & SOC 2 | Interview with Aron Lange
In this episode of Secure and Simple Podcast, host Dejan Kosutic (Advisera) speaks with Aaron Lange (GRC Lab, TÜV SÜD auditor) about combining security controls across multiple standards and frameworks, including ISO 27001/27002, NIST Cybersecurity Framework, NIST SP 800-53 and 800-171, TISAX, C5, SOC 2, and sector-specific regimes like PCI DSS and CMMC. They clarify the difference between requirements and controls, and how to handle cross-mapping, gap analysis, scoping, and phased implementation when adding frameworks. They discuss how standards typically complement rather than contradict…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.