Lead Auditor; ISO 9001, 27001, 22301, 42001

Lead Auditor in ISO 9001, 27001, 22301, 42001.

Also Lead Auditor; Safety Culture Ladder level 4/5

Cryptobro!

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

What separates a good auditor from a great one? It's not knowledge of the standard. Every auditor knows the clauses. It's the ability to make people talk.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

The audit certificate on the wall is only as good as the auditor who signed it. I've seen lead auditors spend 6 hours in a meeting room reviewing documents. Never walked the floor. Never spoke to an operator. Never tested a control. That's not an audit.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

The Safety Culture Ladder assessment doesn't start when the auditor walks in. It starts in the car park. Is PPE worn without being told? Do workers greet the auditor or avoid eye contact? Does the site manager walk the floor or sit behind glass?

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Your employees are not your biggest security risk. Your processes are. Phishing works because processes allow it: — No MFA — No clear escalation path — No culture of "when in doubt, ask" Stop blaming users for clicking. Start auditing the system that made clicking dangerous.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

ISO 9001 · field story; I asked a quality manager to show me their corrective action register. Beautiful spreadsheet. 47 actions. Dates, owners, statuses. Then I asked: how many of these actually prevented a recurrence? Silence. A corrective action that doesn't address.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Three questions I ask every client before we start a Safety Culture Ladder trajectory: 1. What happens to someone who reports a near-miss? 2. When did leadership last visit the work floor uninvited? 3. Can an employee stop a job without asking permission first?

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Contractors in construction and infrastructure are increasingly asked for both ISO 27001 and the Safety Culture Ladder.

Tender requirement, not nice-to-have. Most organisations run these as two separate projects with two separate budgets.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Asked a site manager what happens when someone refuses to do a job because it feels unsafe. He said: "We thank them and figure out a different approach." Asked the same question at a different company last month. The answer was: "We find someone else who will."

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Most companies climb the Safety Culture Ladder for the certificate. Level 3 looks great on a tender document. Level 3 feels safe in a board presentation. But level 3 means your people follow the rules when someone's watching. The ladder is a mirror.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

ISO 27001 certification does not mean you are secure.
It means you have a system for managing the risk of being insecure. I've audited certified companies with open RDP ports, shared admin passwords, and zero patch management. The certificate was real. The security was not.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Clause 6.1.2 of ISO 27001 trips up 80% of organizations.

Asset-based risk assessment sounds simple. It isn't.

Document your reasoning, not just your score The auditor wants to see thinking, not a spreadsheet.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Unpopular opinion: The audit report is the least important output of an audit.

The conversation during the audit? That's where real change happens.

I've seen 10-page reports ignored. I've seen one hallway conversation change a company's culture. Write less. Talk more.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

ISO 27001 is not a cybersecurity certification. It's a management system for information security risk.

The moment companies understand that distinction, their implementation improves by 60%. Stopped selling the certificate. Start managing the risk.

[Lead Auditor; ISO 9001, 27001, 22301, 42001 @longtermbtc]

Most ISO 9001 audits find zero real problems. Not because companies are flawless. Because auditors are checking boxes.

The standard asks *why* things work. Most auditors only ask *if* things work.

Big difference.

[TheGANNMan! @CrypDoMillions]

~ #BTC #GANN ~

~ Price & Time are Equal ~

The November 2022 ATL price was $15,476
15.476 months later, that price was Squared

That's what produced the change in trend!

Also, a curious question, if I were to set up a group, how many people would be interested? If you could show your interest by retweeting would be great! Thanks! 🔥

[PlanB @100trillionUSD]

Gold and #Bitcoin is a great combination! 9 page chapter "The Plan B Model: The Holy Grail of Bitcoin Valuation?" in the just released 2020 version of @IGWTreport In Gold We Trust report! Including an exclusive interview with @100trillionUSD and @MarkValek
https://t.co/MGPOsFQAej

[PlanB @100trillionUSD]

#Bitcoin phases and fiat inflow needed to absorb monthly new BTC 🌪️

Phase1 - BTC $0.23 -> $50K / month fiat inflow needed
Phase2 - BTC $6 -> $1M / month (26x)
Phase3 - BTC $410 -> $44M / month (34x)
Phase4 - BTC $6.7K -> 361M / month (8x)
Phase5 - BTC $288K -> 7.8B / month (21x)

[PlanB @100trillionUSD]

To maintain $7000 since Oct 2017, #bitcoin must have had about $400M new cash inflow every month last 2.5 years! (30d x 24h x 6blocks x 12.5btc x $7k assuming all trading is zero sum game)

After the halving, we only need $200M per month to keep $7k level. If $400M stays, then 🚀

[PlanB @100trillionUSD]

Both #bitcoin S2F cross asset model (based on gold, silver etc) and S2F time series model (historical price path) point to $1T+ BTC market cap in 2020-2024 (red circle, where orange and blue line overlap). $1T+ market cap translates into $55k+ BTC price.
https://t.co/n5P5uMCKHT