Risk Management: How CISOs, Risk & Compliance Teams are Pushing for New Security & Risk Management Standards

At Compliance Standards we have been observing the rise of a different group of security professionals within large companies who have been working to impose new standards for their organization’s IT asset disposition and recycling practices. Large organizations are now giving more responsibility or oversight on ITAD to the Chief Information Security Officer (CISO) and to Risk & Compliance teams, essentially elevating the ITAD risk to above and beyond the traditional immediate stakeholders of IT and procurement. This trend is good news for enterprises because it is a recognition that ITAD security is crucial. It is both good and bad news for ITAD companies. On the one hand elevating ITAD security is an opportunity to broaden the ITAD stakeholders in the enterprise and could help strengthen ITAD as a critical function. It is bad, because compliance will cost money. In this podcast, David Daoud of Compliance Standards speaks to Security Management expert and Head of Compliance at Compliance Standards, Louis Van Der Westhuizen, on topics related to these new standards, in articular ISO 27001 and SOC 2.