E068 - Compliance Programs: Part 2

In this episode of Socializing Security, Milou and Brian delve into the complexities of compliance programs, focusing on the importance of selecting the right audit firms, the role of GRC software, and the common controls necessary for effective compliance. They discuss the significance of access control, incident response, risk management, data protection, vendor management, security awareness training, audit logging, business continuity, and vulnerability management. The conversation emphasizes the mutual relationship between security and compliance, providing insights for organizations looking to enhance their compliance efforts.

Chapters
00:00 Exploring Compliance Programs
02:45 Partnering with Audit Firms
05:32 Choosing the Right Audit Firm
08:25 The Role of GRC Software
11:03 Managing Compliance Documentation
14:07 Common Security Controls
21:46 Access Control Challenges
23:33 Incident Response Essentials
26:07 Risk Management Practices
27:49 Data Protection and Privacy
30:25 Vendor Management Strategies
32:23 Security Awareness Training Importance
34:10 Audit Logging and Monitoring
36:29 Business Continuity and Disaster Recovery
38:29 Vulnerability Management Overview