Latest / Secure & Simple — Podcast for Consultants and CISOs on Cybersecurity Governance and Compliance
ISO 27001 Certification: What Will the Auditor Look For? | Interview with Aron Lange
In this Secure & Simple Podcast episode, host Dejan Kosutic (CEO of Advisera) interviews Aron Lange, founder of GRC Lab and an ISO 27001 certification auditor, about what auditors look for in certification audits. Aron highlights common nonconformities and explains how auditors gather objective evidence through interviews, document review, and observation, emphasizing execution over paperwork. The conversation also covers auditor interpretation, challenging unsupported findings, risk-based control auditing, management-system vs security-posture certification, continual improvement, and the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.