Are You Team NIST or Team ISO?

If you don’t know what we’re talking about—you need to read this.

It’s no secret that SAI360 takes IT risk and cybersecurity seriously. Today we help hundreds of organizations to automate, prioritize, manage, and report on risks in a constantly changing world. That’s why we were named a Leader by Gartner in its recent IT Risk Management Magic Quadrant. 

We also know that the success of risk projects is about so much more than technology. It’s about having a strategy, understanding scope, and mapping out processes.

But you don’t have to start from scratch—you can use frameworks such as NIST 800-39 and ISO 27005. These frameworks on managing information security risks provide in-depth steps and workflows that can help.  

But they aren’t similar in approaches. Should you choose NIST? Or ISO?

In its insights paper, Ten Cyber and IT Risk Fundamentals You Must Get Right, Gartner has a view on this – click to download and read whether you should be on team NIST or team ISO.

Additional resources:

• Recognized for Completeness of Vision and Ability to Execute, SAI360 is placed as a Leader in the 2021 Gartner® Magic Quadrant™ for IT Risk Management.

• Learn more about SAI360 GRC for managing IT risk and cybersecurity. Or, contact us to see how we’ve helped organizations like yours.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Gartner: “Ten Cyber and IT Risk Fundamentals You Must Get Right,” by Claude Mandy and Jie Zhang. Published 19 October 2021. Gartner, “Magic Quadrant for IT Risk Management,” by Brent Predovich and Claude Mandy. Published 13 September 2021.​ Gartner and Magic Quadrant are registered trademarks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.