Business Continuity Table Tops
DPIA • AIIA
Virtual ISO Manager
Physical Security
SOC II Type 2 Readiness
TISAX® Readiness
While maintaining compliance is a necessity, organizations today are looking to maximize their use of resources and reduce costs. Partnering with Radian Compliance to support ongoing compliance provides you with proficient and seasoned resources to assist with required compliance activities.
Our team of subject matter experts have extensive experience in the value-added services below. These can be stand alone requests or added to an existing engagement.
To find out more about our value-added services or to talk directly to us, please email info@radiancompliance.com or call Sally Smoczynski at 630-728-7181.
Business Continuity
Tabletop Exercises
Whether you have an ISO requirement to maintain and test a Business Continuity Plan (BCP) or a corporate requirement to do so, Radian Compliance has extensive business continuity management expertise and supports multiple industries with tabletop exercises. Our service will identify current trends, local risks and input from the organization to test the BCP and emergency response against a timed scenario. The output would be a summary of the event with outcomes and recommendations. An organization can use this information to improve and continue to educate its teams. Sample exercises can include cybersecurity, ransomware, supply chain breach, AI, physical security response, etc.
Data Protection/Privacy Impact Analysis
(DPIA)
Every organization, whether large or small, has some level of obligation to protect employee and/or customer data. Our privacy experts will work with your key stakeholders to identify how the organization receives, uses and stores information requiring protection. Whether requirements are of GDPR or any of the multiple U.S. states requiring some level of privacy protection, this assessment will give an organization the knowledge to move forward to enhance or create its privacy posture.
Artificial Intelligence
Impact Assessment (AIIA)
The evolution of AI being used within an organization is happening at lighting speed. A governance model is essential to ensure the integrity and safety of use. Developing a process to identify the use case for AI systems used to solve business problems is critical to ensuring risks are identified and procedures to identify the data integrity and model inventory is mandatory. Radian’s AI team will walk you through the value stream of assessing the impact of use.
Virtual ISO Manager
(ISMS, PIMS, QMS, AIMS, SMS, BCMS)
All ISO management systems require leadership to assign roles and responsibilities to ensure the ongoing sustainability and continual improvement for the scope of certification. In many cases, these requirements are added to an existing corporate role. At some point, the effort may be too much, the person changes positions or leaves the organization, or the organization adds more ISO management systems. Clients have given this role a variety of titles (QMS Manager, Information Security Officer, Service Manager, etc.). Whatever the title, the activities are essential for timely, ongoing maintenance; communication; and review of the ISO management system. When an internal resource cannot be dedicated, we offer a retainer service to perform the ongoing quality/compliance management tasks required by your ISO management system and your organization. Radian will assign to you a dedicated, experienced team member who will act as an outsourced extension of your management system. This individual will work both virtually and onsite to perform daily, weekly and monthly tasks to help ensure ongoing compliance of your management system(s).
Physical Security
Risk Management
Radian Compliance is fortunate to have a diverse set of consultants with many specialties. One being an expert in identifying and managing risk to ensure the appropriateness of an organizations physical security processes and procedures. Our specialty service includes:
• Physical Security policy and procedure audits
• Physical Security Risk /Vulnerability assessments
• Physical Security Technology assessments
SOC II Type 2 Readiness
Radian will support the readiness and operational maturity of Client’s SOC 2, Type 2 boundaries. We do not perform the SOC 2 Type II examination itself, which will be conducted by an independent auditing firm.
The Radian Methodology includes:
• SOC 2 scoping and planning
• Readiness and gap analysis
• Control design and documentation
• Control implementation and operationalization
• Audit preparation and advisory support
TISAX® Readiness
The Trusted Information Security Assessment Exchange, TISAX®, is an assessment and exchange mechanism for the information security of enterprises governed by the European Network Exchange (ENX). The Information Security Assessment (ISA), commonly referred to as the ISA catalog is the common set of requirements within the automotive industry to protect information security, data and prototypes.
The ISA closely aligns with ISO 27001 having 43 of their 45 controls specifically map directly to ISO 27001, Annex A controls.
An organization being assessed for TISAX® will receive a Label that identifies their scope and assessment outcomes. Our Radian team, already experts in ISO 27001, can support an organization’s readiness for a TISAX® assessment by an authorized ENX assessor. Radian is not an authorized assessor, but we can support the requirements up to assessment including internal audit. An organization can implement TISAX® with ISO 27001 or stand alone.
SOC II Type 2 Readiness
Radian will support the readiness and operational maturity of Client’s SOC 2, Type 2 boundaries. We do not perform the SOC 2 Type II examination itself, which will be conducted by an independent auditing firm.
The Radian Methodology includes:
• SOC 2 scoping and planning
• Readiness and gap analysis
• Control design and documentation
• Control implementation and operationalization
• Audit preparation and advisory support
To find out more about our value-added services or to talk directly to us, please email info@radiancompliance.com or call Sally Smoczynski at 630-728-7181.