Replies to This Discussion

ConsultantPermalink Reply by Hadi Hosn on January 16, 2013 at 14:42

Hi guys,

I really think this is a great idea. You could obviously start with a well known standard such as ISO27001 and extend the system when it is established to cover off other ISO industry standards. in terms of the specifics of ISO27001 I am actually an expert in this area and provide several clients here in London with advisory services to align their information security to this standard.

Given your target market is the auditing of the ISO27001 controls in place, you may slightly struggle in the fact that typically consultancies and other advisors get involved with companies in the early stages and help them through the ISO alignment or certification route which includes carrying out a pre-certification audit (Stage 0 audit) manually through the use of tools and then they would communicate the results to their clients. If we are automating the entire process of auditing into a system based on Artifical intelligence - my first question would be what type of information comes out from the system. Based on this I'm sure we can give you a better view of the concept.

Regards,

Hadi

• ▶ Reply