Blog categorized as English

Artificial Intelligence (AI) and risk management with the ISO 23894 standard
The ISO 23894 standard provides us a guidance to manage AI-related risks on organizations that develop or use intelligence-base products, systems or services.
itSMF Staff
06 Dec 2023 07:00 AM - Comment(s)
A framework for Artificial Intelligence (AI) using Machine Learning (ML): ISO 23053 standard
The ISO/IEC 23053 standard provides us a framework to better figure out artificial intelligence systems using Machine Learning: let's check it out.
itSMF Staff
22 Nov 2023 07:00 AM - Comment(s)
ICT resources in the Italian finance industry: the requirements set by Bank of Italy circular 285 (GRC approach and main related standards)
Let's focus on ICT resources requirements for Italian finance industry set by Bank of Italy on Circular 285 with a GRC approach (and ISO related standards).
itSMF Staff
25 Oct 2023 07:30 AM - Comment(s)
FINMA requirements for ICT resources in Swiss finance industry: GRC approach and main related standards
The FINMA set several ICT resources requirements for the Swiss finance industry: we can manage them with a GRC approach according to the related ISO standards.
itSMF Staff
20 Sep 2023 07:00 AM - Comment(s)
Information Security Incident Management according to the ISO/IEC 27035-2 standard
The ISO/IEC27035-2:2016 standard provides guidelines to plan and prepare for incident response and to learn lessons from incident response.
Davide Micheli
28 Jun 2023 07:00 AM - Comment(s)
Information Security Incident Management according to the ISO/IEC 27035-1 standard
The ISO/IEC27035-1:2016 standard provides useful principles for handling information security incidents: let's check them out in our post.
Davide Micheli
03 May 2023 07:00 AM - Comment(s)
Information technology and information security integration according to the ISO/IEC 27013:2021 standard
Information technology and information security can be integrated according to the ISO27013: let's take a closer look at this standard.
Davide Micheli
22 Feb 2023 09:07 AM - Comment(s)
Privacy & Risk Management according to ISO/IEC 27557:2022
The ISO/IEC 27557:2022 standard on information security, cybersecurity and privacy protection offers us a framework for assessing the organizational privacy risk.
Davide Micheli
08 Feb 2023 07:00 AM - Comment(s)
GRC and Artificial Intelligence: a scenario
Artificial Intelligence is getting day after day more important for a lot of human activities: AI can add a lot of value also on the adoption of a smart GRC model for our business.
Davide Micheli
13 Dec 2022 12:19 PM - Comment(s)
The ISO 27002:2022 standard: the new information security controls
ISO released its new 27002:2022 standard updating also the information security controls: let's take a closer look at all the news.
Davide Micheli
23 Nov 2022 12:04 AM - Comment(s)
The new Information Security Management System ISO27001 Standard edition 2022
The new ISO27001 Standard (2022) set updated requirements on Information Security Management System (ISMS): let's discover some details about them.
Davide Micheli
02 Nov 2022 07:00 AM - Comment(s)
The integrated ICT GRC in Swiss and Italian financial services industry
Financial services industry in Italy and Switzerland can take advantage of an integrated management of ICT GRC: let's take a look at our approach.
Davide Micheli
19 Oct 2022 09:24 AM - Comment(s)
Benefits of Corporate Governance for SMEs
SMEs can take advantage of the best practises of Corporate Governance: let's discover together all the benefits of CG on this kind of enterprises.
itSMF Staff
21 Aug 2022 12:17 PM - Comment(s)
Software as a Medical Device (SWaaMD) and the ISO Management Systems
Let's check out more details about Software as a Medical Device & ISO Management Systems and the compliance with EU regulations.
itSMF Staff
20 Jul 2022 07:00 AM - Comment(s)
The organizations journey becoming♾️agile
Decide timely, commit late, fail smart and learn fast, deliver better solutions and experience to customers: these are some aspect of the agility more and more organizations are asking for them.
itSMF Staff
07 Feb 2022 02:11 PM - Comment(s)
ITIL or FitSM service management? It’s not a question of commerce
Is better ITIL® OR FitSM service management? This is not just a commercial question: let's try to find an answer together.
itSMF Staff
18 Jan 2022 06:00 AM - Comment(s)
GRC and personal data transfer from Switzerland: the standard contractual clauses
The transfer of personal data to a country with an inadequate level of data protection from Switzerland and the role of Standard Contractual Clauses.
itSMF Staff
14 Oct 2021 07:00 AM - Comment(s)
GRC and data protection in Switzerland: the FADP/LPD Ordinance
The data protection in Switzerland and GRC: let's take a look together at the FADP ordinance.
itSMF Staff
18 Aug 2021 06:00 AM - Comment(s)
GRC and Data Protection: the GRC approch in EU and Swiss contexts
Data protection between EU and Switzerland and the GRC Data Protection approach on GDPR and LPD-DSG-LPD (FDA): let's take a closer look at these laws together.
itSMF Staff
04 Aug 2021 05:00 AM - Comment(s)
GRC and data protection in Switzerland: structure and main requirements of the LPD
Data protection in Switzerland is regulated by the Swiss Federal Data Protection Act (DPA): the new law will enter into force on September 2023.
itSMF Staff
22 Jul 2021 05:00 AM - Comment(s)