Mastering Internal Audits for ISO Standards | Interview with Carlos Cruz

Episode notes

In this episode of the Secure and Simple Podcast, host Dejan Kosutic, CEO at Advisera, welcomes Carlos Cruz, founder of Metanoia Consulting and a seasoned expert in ISO standards. Carlos and Dejan share best practices for performing internal audits across various ISO standards, including ISO 27001, and other cybersecurity frameworks such as NIS2 and DORA. Key topics discussed include the importance of internal audits, how to prepare effective audit checklists, and the role of AI in the future of auditing. The episode also explores the differences between internal audit programs and plans, the significance of audit objectives, and offers practical advice for consultants looking to expand their services into internal auditing. Carlos provides a deep dive into ensuring compliance and effectiveness while offering practical tips on maintaining independence and delivering valuable audit reports.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• CMMC Is an HR Problem, Not an Enclave Problem - Here's the ProofSecure Talk Podcast · on ISO 2700195 / 100
• Mastercard CEO: AI Shopping Agents, Machine-to-Machine Payments, and the New Infrastructure of CommerceMotley Fool Hidden Gems Investing · on Cybersecurity88 / 100
• AI-Accelerated Supply Chain Attacks with Mackenzie JacksonRunAs Radio · on Cybersecurity83 / 100
• Cognitive Surrender: How AI Weaponizes Human PsychologyThe Audit · on Cybersecurity82 / 100
• Why Most Startups Fail: Founders Don’t Know What They Don’t Know YetBuilt Not Born: The Startup Go-To-Market Podcast · on Cybersecurity80 / 100
• AI and Cybersecurity in SMBs: Insights from Bruno LecoqSecuring the Realm · on ISO 2700179 / 100

• CMMC Level 2: Documentation, Costs, and Audit Readiness | Interview with Bruno Lecoq89 / 100
• How CISOs Should Talk to Corporate Boards | Interview with Michelle Drolet65 / 100
• Why Conventional Cybersecurity Won’t Protect AI? | Interview with Hugo Huang72 / 100
• ISO 27001 Certification: What Will the Auditor Look For? | Interview with Aron Lange83 / 100
• Anthropic’s Mythos and the Future of Vulnerability Management | Interview with Thom Langford78 / 100