Best Practices for Writing Policies and Procedures | Interview with Carlos Cruz

Episode notes

In this episode of the Secure and Simple Podcast, host Dejan Kosutic interviews Carlos Cruz, founder of Metanoia Consulting in Portugal. They discuss essential best practices for creating and managing policies, procedures, plans, and other documents for compliance with ISO standards and cybersecurity regulations. Carlos shares insights on the distinction between procedures and work instructions, the importance of writing clear and concise documents, and the challenges of getting employees to adopt new procedures. They also cover the importance of templates, techniques for ensuring documents reflect current practices, and strategies for addressing resistance to new documents. This episode is a must-watch for consultants, CISOs, and other cybersecurity professionals looking to streamline their documentation process.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• Mastercard CEO: The $15.6 Trillion Threat Most Investors Are IgnoringMotley Fool Hidden Gems Investing · on Cybersecurity88 / 100
• The Evolution of Modern GRC ft. James Huang, Head of GRC @ GongSecurity & GRC Decoded · on ISO 2700186 / 100
• AI and Cybersecurity in SMBs: Insights from Bruno LecoqSecuring the Realm · on ISO 2700179 / 100
• Navigating AI Risks with Trevor Horwitz from TrustNetB2B Automation Spotlight · on Cybersecurity79 / 100
• Moving from Product Partnerships to Revenue: Jira Cooley on Owning the NumberBetween Product and Partnerships · on Cybersecurity76 / 100
• Pipeline Gives Permission to Invest Big on Brand with Jennifer JohnsonThe B2B CMO Podcast with Jon Miller and Sydney Sloan · on Cybersecurity74 / 100

• CMMC Level 2: Documentation, Costs, and Audit Readiness | Interview with Bruno Lecoq89 / 100
• How CISOs Should Talk to Corporate Boards | Interview with Michelle Drolet65 / 100
• Why Conventional Cybersecurity Won’t Protect AI? | Interview with Hugo Huang72 / 100
• ISO 27001 Certification: What Will the Auditor Look For? | Interview with Aron Lange83 / 100
• Anthropic’s Mythos and the Future of Vulnerability Management | Interview with Thom Langford78 / 100