The ISO Review Podcast

Howard and Jim discuss the ISO/IEC 42001 AI management system standard, Annex C (Potential AI-related organizational objectives and risk sources) and D (Use of the AI management system across domains or sectors). POINTS DISCUSSED Annex C Explanation of Annex C Objectives Risk Sources Annex D Explanation of Annex D Integration of AI management system with other management system standards Looking A...

Howard and Jim chat about ISO 42001, the world's first artificial intelligence management system International standard. In this episode they discuss Annex B.10 - Third-party and customer relationships. POINTS DISCUSSED Explanation of what Clause B.10 - Third-party and customer relationships covers Objective Allocating responsibilities Suppliers Customers Looking Ahead - Preview of next episo...

Howard and Jim chat about ISO 42001, the world's first artificial intelligence management system International standard. In this episode they discuss Annex B.9 - Use of AI systems. POINTS DISCUSSED Explanation of what Clause B.9 covers: “Use of AI systems” Key Requirements and Concepts in Clause B.9 Real-World Applications & Analogies Internal vs. External AI Models in Organizations Human...

Howard and Jim chat about ISO 42001, the world's first artificial intelligence management system International standard. In this episode they discuss Annex B.8 - Information for interested parties. POINTS DISCUSSED Objective of ISO 42001, Annex B.8 - Information for interested parties. System documentation and information for users External reporting Communication of incidents Information for...

Howard and Jim chat about ISO 42001, the world's first artificial intelligence management system International standard. In this episode they discuss Annex B.7 - Data for AI systems. POINTS DISCUSSED Objective of ISO 42001, Annex B.7 - Data for AI systems Data for development and enhancement of AI system Acquisition of data Quality of data for AI systems Data provenance Data preparation LEARN...

Howard and Jim chat about ISO 42001, the world's first artificial intelligence management system International standard. In this episode they discuss Annex B.6 - AI system life cycle POINTS DISCUSSED Overview of ISO 42001, Annex B.6: Implementation Guidance for Artificial Intelligence Controls Management guidance for AI system development AI system life cycle AI system requirements and specif...

Howard and Jim chat about ISO 42001, the world's first artificial intelligence management system International standard. In this episode they discuss Annex B (Implementation Guidance for Artificial Intelligence Controls), Clause B.5. POINTS DISCUSSED Overview of ISO 42001, Annex B: Implementation Guidance for Artificial Intelligence Controls Clause B5 and Impact Assessments High-Level Managem...

Howard and Jim chat about ISO 42001, the world's first artificial intelligence management system International standard. In this episode they discuss Annex B (Implementation Guidance for Artificial Intelligence Controls), Clauses B.1 - B.4. POINTS DISCUSSED Overview of ISO 42001, Annex B: Implementation Guidance for Artificial Intelligence Controls Annex B, Clause B.1 – Implemenation Guidance...

Howard and Jim chat about an exciting new frontier: ISO 42001, the world's first artificial intelligence management system International standard. In this episode we discuss Annex A (Controls), Claues A.7 - A.10 POINTS DISCUSSED Overview of ISO 42001 Annex A Controls Annex A Control A.7 – Data for AI Systems Annex A Control A.8 – Information for Interested Parties of AI Systems Annex A Contro...

Howard and Jim chat about an exciting new frontier: ISO 42001, the world's first artificial intelligence management system International standard. In this episode we discuss Annex A Controls, A.1 - A.6 POINTS DISCUSSED Overview of ISO 42001 Annex A Controls Annex A Control A.2 – Policies Related to AI Annex A Control A.3 – Internal Organisation Annex A Control A.4 – Resources for AI Systems A...

Howard and Jim chat about an exciting new frontier: ISO 42001, the world's first artificial intelligence management system International standard. In this episode we discuss Clause 10, Improvement POINTS DISCUSSED Discussion of Clause 10: Improvement Details on Continual Improvement Processes Internal Audit Process Stakeholder and Interested Party Involvement Risk-Based Thinking Approach Impl...

Howard and Jim chat about an exciting new frontier: ISO 42001, the world's first artificial intelligence management system International standard. In this episode we discuss Clause 9, Performance Evaluation. POINTS DISCUSSED Understanding ISO 42001 Artificial Intelligence and Risk Assessment Internal Audits and ISO Standards Performance Evaluation Implementation Challenges Management Review I...

Howard and Jim chat about an exciting new frontier: ISO 42001, the world's first artificial intelligence management system International standard. In this episode we discuss Clauses 8.1 - 8.4. POINTS DISCUSSED Evolutions in Standards - How the significant changes in the ISO 9001 standard over the years reflect the evolving needs of industries and technology. Harmonized Structure - The benefit...

Howard and Jim chat about an exciting new frontier: ISO 42001, the world's first artificial intelligence management system International standard. In this episode we discuss Clauses 4-7. POINTS DISCUSSED AI's Rapid Advancement and Implications for businesses. Importance of AI Standards and their value even if companies don't seek certification. ISO Standard Details, introduction to...

Howard and Jim chat about an exciting new frontier: the emergence of ISO 42001, the world's first artificial intelligence management system International standard. POINTS DISCUSSED How ISO/IEC 42001:2023 compares to other existing Harmonized Structure ISO standards like ISO 9001, ISO 27001 and ISO 14001 in terms of structure. The ways in which ISO 42001 standard addresses ethical consideratio...

Howard and Jim chat about ISO/IEC TS 27008:2019 - Clause 8.3 - Conduction Reviews and Clause 8.4 - Analysis and Reporting Results. POINTS DISCUSSED The key components of clauses 8.3 and 8.4 of ISO 27008, and why are they critical for conclusions about the effectiveness of your information security management system. The importance of why auditors should remain unbiased and provide factual reports,...

Howard and Jim chat about ISO/IEC TS 27008:2019, Clause 8.2.9: Extended Review Procedures, 8.2.10: Optimization, and 8.2.11:  Finalization. POINTS DISCUSSED Information Assets and Organization Extended Review Procedures Optimization Strategies Case Study Reflection Internal Auditing Organization-Specific Conditions Workflow Auditing Impact of Unexpected Events Preparations for Conducting Interview...

Howard and Jim chat about  ISO/IEC TS 27008:2019 - Clauses 8.2.6  Work Assignments, 8.2.7 External Systems, and 8.2.8 Information Assets and Organization. POINTS DISCUSSED The importance of thinking about information as an asset, and how can this mindset shift impact the effectiveness of an organization's information security management system . The inevitability of cyberattacks, and how ISO...

Howard and Jim chat about  ISO/IEC TS 27008:2019 - Clause 8.2.4 - Object-Related Procedures, and 8.2.5 - Previous Findings POINTS DISCUSSED How has the role of information security management systems evolved over time, and what key changes have occurred in the past few years? What are some specific methods organizations can use to review their information assets, and how do these methods ensure th...

Howard and Jim chat about  ISO/IEC TS 27008:2019 - Clause 8.2 - Planning the Assessment:  Clauses 8.2.1, 8.2.2 and 8.2.3 POINTS DISCUSSED  ISO/IEC TS 27008:2019 - Clause 8.2 - Planning the Assessment clauses 8.2.1, 8.2.2 and 8.2.3. Some common misconceptions people have about ISO standards.  The importance of planning when assessing controls. How the "Plan, Do, Check, Act" methodology fi...

Howard and Jim chat about  ISO/IEC TS 27008:2019 - Clause 8.0 - Control Assessment Process: Clause 8.1 - Preparation. POINTS DISCUSSED Why is a thorough preparation essential for a successful ISO 27001 Annex A audit? How can management support and engagement influence the outcome of an ISO 27001 Annex A audit? What are the critical steps that organizations must complete before an ISO 27001 Annex A...

Howard and Jim chat about ISO/IEC TS 27008:2019 - Assessing Information Security Controls, Sampling Techniques - Clause 7.5. POINTS DISCUSSED Introduction and Context The importance of neutrality and objectivity in selecting sample items for an audit. The criteria used to determine samples. The steps that should be taken after an audit to ensure effective communication of results and implementatio...

Howard and Jim chat about ISO/IEC TS 27008:2019 - Assessing Information Security Controls, Testing and Validation Techniques - Clauses 7.4.4 - 7.4.7. POINTS DISCUSSED Introduction and Context Testing Techniques for ISO 27001 Systems - Annex A Controls The Importance of Information Security Testing Testing and Validation Techniques - Clauses 7.4.4 - 7.4.7  Grey Box Testing, Double Grey Box Testing,...

Howard and Jim chat about ISO/IEC TS 27008:2019 - Assessing Information Security Controls, Testing and Validation Techniques - Clauses 7.4.1 - 7.4.3 POINTS DISCUSSED Introduction and Context Testing Techniques for ISO 27001 Systems Testing and Validation Techniques - Clause 7.4. The Importance of Information Security Testing Blind Testing & Double Blind Testing Preparations an auditor make pri...

Howard and Jim chat about ISO/IEC TS 27008:2019 - Review Methods, Overview, and Process Analysis  - Clauses 7.1-7.3. POINTS DISCUSSED What are the key takeaways from Jim's explanation of ISO 27008 and the review methods overview and process analysis discussed in the episode? How do you think the use of flowcharts to document procedures and audit controls can benefit organizations in assessing...