Преднастроенные курсы: ISO 27001 awareness, OWASP Top 10, phishing simulation, GDPR processor responsibilities, incident response, SOC 2 Trust Services. Для MSPs, SaaS vendors, cloud consultants и cybersecurity firms — с DPA / sub-processor / breach-SLA tracking.
Курсы — awareness и induction level. Они НЕ заменяют accredited ISO 27001 Lead Implementer / Lead Auditor (PECB, BSI, IRCA), SOC 2 readiness assessment от qualified CPA firm, CSSLP / OSCP / GCIH certifications, legal advice по вашим DPA. Для onboarding, annual refreshers, security awareness cadence и compliance visibility.
ISMS scope, Statement of Applicability, risk assessment methodology, 93 Annex A controls (Organizational / People / Physical / Technological). Internal-audit + management-review periodic policies enforce annual cadence.
Security (Common Criteria), Availability, Confidentiality, Processing Integrity, Privacy. Policy templates trace к AICPA 2017 criteria (revised 2022), поддерживают evidence requests от CPA firm.
Art. 28 обязательные DPA clauses, sub-processor approval workflow, Art. 33 breach notification SLA, Art. 30(2) ROPA, international transfer safeguards (SCCs, UK IDTA).
Quarterly phishing simulation cadence, OWASP Top 10 developer training, incident response (NIST SP 800-61) + annual tabletop, vulnerability management с patching SLA, NIS2 Art. 21 risk measures для EU essential/important entities.
ISO/IEC 27001:2022 + 27002:2022 • AICPA SOC 2 Trust Services Criteria (2017, rev. 2022) Type I + II • EU GDPR Art. 28 / 30(2) / 32 / 33 • EDPB Guidelines 07/2020 • EU SCCs (2021/914) + UK IDTA • NIS2 Directive EU 2022/2555 (effective 2024-10-17) • NIST SP 800-61 Rev. 2 • NIST SP 800-50 • SANS PICERL • OWASP Top 10:2021 + ASVS 4.0 • ENISA Threat Landscape.
Забронируйте 20-минутный walkthrough. Покажем как MSPs + SaaS teams используют платформу для ISO 27001 evidence, SOC 2 evidence, sub-processor register maintenance, phishing sim cadence и IR tabletops — не заменяя CPA firm или external counsel.