Medical device companies MUST have established risk management processes that comply with ISO 14971. And it doesn’t matter if you are developing medical devices in the U.S., EU, Canada, and so ...

In Part IV of my series on ISO 37001, I examine requirements relating to risk assessments, design of policies and procedures, and due diligence requirements. Under Section 6.1, a company is ...

ISO 31000:2018 is a shorter and clearer guide to help organizations improve planning and decision-making through the use of risk management principles.

Lauren Connell, Managing Associate at The Volkov Law Group, rejoins us for a posting about ISO 37001 certification for your third parties. Lauren can be reached at lconnell@volkovlaw.com. A lot of ...

Making ISO 45003 part of company policy could do wonders for a business’s employer brand. It can help to normalize psychological injuries, giving people more confidence to open up if they’re ...

ISO 31000 is an international standard for risk management that provides a framework for identifying, assessing, and managing risks across an organization. The ISO 31000 Lead Risk Manager… ...

Information risk management regime: Management sets the tone in any organization. Where top management take information security management seriously, it will help instill a risk-aware culture ...

MADISON, Wis.--(BUSINESS WIRE)--Promega Corporation has become the first major forensic manufacturer to achieve third-party certification of the published ISO 18385 standard to minimize the risk ...

Aligned with the NIST AI RMF, ISO/IEC 42001, and the EU AI Act, the program builds practical expertise and concludes with a certification exam to validate skills in AI risk assessment and cyber ...