Would your business pass pre-flight information security checks?
summary
Explains concrete controls and costs: Cyber Essentials covers five controls (firewalls, secure configuration, user access, malware, patching) and starts ~£300; ISO27001 (updated 2022) builds a full ISMS and is chosen here as globally recognized and more cost‑effective for tendering; SOC2 is US‑centric with audits from ~$30k to $660k and implementation up to ~$100k. Recommends staff and contractor training, suggests CompTIA Security+ and Microsoft exams SC‑200/SC‑300/SC‑400/SC‑900, and notes embedding policies and supplier checks.
AI-written summary · about
chapters (12)
- 0:00Information security checks intro
- 1:10What is information security
- 2:37CIA Triad and risk mitigation
- 3:43History of information security
- 4:45Building security framework
- 6:54Cyber Essentials overview
- 9:21ISO 27001 deep dive
- 11:49SOC 2 costs
- 13:14Training and outsourcing
- 14:39Microsoft and CompTIA certs
- 15:42Zero trust responsibility
- 16:04Summary and call to action
related talks
27mSmall Company, Big Threats: Cybersecurity for the Rest of Us
24mCybersecurity Awareness: Small & Medium Enterprises (SMEs)
51mUnderstanding the Cyber Security Acronym Soup
46mThe Perfect Storm, What NIS2 and CRA Mean for Your IT Security Strategy
33mSecurity on a Shoestring: A Low-Budget Security Revival Tour (Jared Casner)
31mAlleviating the Fear in Preparing for Information Security Compliance
29m3rd-Party Cyber-Risk Mitigation by Using ISO Standards
41mAim-Ready-Fire
