Andrey Prozorov

CISM, CIPP/E, CDPSE, LA27001 | Advisor and Mentor | I create cybersecurity and privacy toolkits focusing on compliance #ISMS #ISO27001 #GDPR #ISO27701 #DORA

[Andrey Prozorov @APr8020]

😍Friendly reminder: I create and collect checklists, templates, mindmaps and other documents for information security and privacy professionals on Patreon -https://t.co/xy9We9331I
#isms #iso27001 #privacy #gdpr #grc

[Andrey Prozorov @APr8020]

🇺🇸🇪🇺GRC in the US and EU - https://t.co/yDkg50KIvS #grc #compliance #risk #governance

[Andrey Prozorov @APr8020]

🔥 My new model: The GRC Cube 🔥

The GRC Cube (Governance, Risk, and Compliance Cube) is a conceptual approach that helps organisations categorise and manage regulatory and compliance obligations across three key dimensions.

PDF - https://t.co/OPKAzSX8JT

#grc

[Andrey Prozorov @APr8020]

Over the past year, I have participated in several ISO 27001 certification audits, so I have updated and expanded my presentation "ISO 27001: How to prepare for the certification audit” https://t.co/QQZ2mawN8l
#isms #iso27001

[Andrey Prozorov @APr8020]

🔥ISMS Implementation Toolkit (ISO 27001), v.6.4 - https://t.co/rOarKFVy6n
#isms #iso27001 #grc #cybersecurity

[Center for Internet Security (CIS) @CISecurity]

Do you want to provide your customers with the assurance that your organization has met CIS standards for CIS Controls assessment? Consider the CIS Controls accreditation program. https://t.co/7lBikjrflD #cybersecurity #crestapproved

[Data Protection Commission Ireland @DPCIreland]

The DPC is seeking to appoint Senior ICT Technologists via open competition. For more information on these roles and how to apply, take a look at the careers page of our website
👉 https://t.co/E3C7dxCKph

⏰ Closing date for application is 12pm (noon) on Wednesday, 2 April 2025.

[Andrey Prozorov @APr8020]

New post on Patreon. EU DORA and Internal Audit https://t.co/lkaOnHEiSb #dora #audit #grc

[Andrey Prozorov @APr8020]

FAIR Cyber Risk Scenario Taxonomy (An Analyst's Guide)

https://t.co/pKN4P9h2au

[Andrey Prozorov @APr8020]

NICE Releases NICE Framework Components v2.0.0
- https://t.co/GfksnV9LdR

NICE Framework establishes a standard approach and common language for describing cybersecurity work and learner capabilities

[ENISA @enisa_eu]

🛡️ What’s New in the NIS 2 Directive?

Watch this video to explore the key changes from NIS 1 to #NIS2, and understand their impact on #ENISA, the European Commission, and EU Member States.

🔗https://t.co/m5HGgPw80z

[Andrey Prozorov @APr8020]

NIST IR 8286C Rev. 1 (Initial Public Draft)
Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight

https://t.co/rTNWzSSKPu

[Andrey Prozorov @APr8020]

NIST IR 8286D Using Business Impact Analysis to Inform Risk Prioritization and Response https://t.co/G841Tv6eaC

[Andrey Prozorov @APr8020]

NIST SP 800-226 Guidelines for Evaluating Differential Privacy Guarantees https://t.co/jQjg6tOQHM

[Andrey Prozorov @APr8020]

NIST IR 8286 Rev. 1 (Initial Public Draft)
Integrating Cybersecurity and Enterprise Risk Management (ERM)

https://t.co/oCxPRB7wuy

[Andrey Prozorov @APr8020]

NIST IR 8286A Rev. 1 (Initial Public Draft)
Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management

https://t.co/oZ5reOa9cC

[Andrey Prozorov @APr8020]

NIST IR 8286B Prioritizing Cybersecurity Risk for Enterprise Risk Management https://t.co/PwxeKIycPs

#nist #cybersecurity #grc #risk #erm

[Digital EU 🇪🇺 @DigitalEU]

AI experts 🤝 EU

The AI Office & national authorities will work closely with a panel of independent experts to ensure the AI Act is effectively implemented & enforced.

This scientific advisory group will focus on governance, technical advice, enforcement & risks.

Read more ⤵️

[Andrey Prozorov @APr8020]

NCSC NL: Beyond elearning Guide - https://t.co/9AMJ0PGlf4

Our aim in this publication is to offer you guiding principles to help you promote cyber-secure behaviour among the employees in your organisation.