Quality Assurance and Risk Management
Risk Management
Risk management, or managing risk, is the process of identifying, assessing and controlling threats to your business earnings and operations.
Risk in the data, insights and research industry typically involves managing personal information (confidentiality, integrity and availability), whether in house or outsourced.
There are a variety of other sources including global financial uncertainties, legal liability, and technology changes. Managing risk requires the identification of these aspects within your business and the actions associated with controlling the risks.
The ADIA Academy
The ADIA Academy provides many courses on risk management, including:
- ADIA Privacy Code 2021- APPS and Governance
- Service Level Agreements: SLA’s
- Privacy: Information Security and PIA
- Supply Chain Management
- ISO 20252: Privacy PI and Information Security IS synergies
- Cookies in Technology
- Cyber Health – Cyber Security Health Checklists
- Data Breach Notifications: Preparation + Response Plan
Additional packages and material are uploaded monthly
Quality Management
ISO 20252: 2019 is an industry quality service standard focused on industry research methodologies and integration with other factors such as information security, people and supplier risk management and records management. Find out more about ISO 20252.
If you are buying research and insights services, please refer to our Questions to help buyers of online market and social research information.
ADIA members work under the industry Trust Mark.
The ADIA Academy
The ADIA Academy provides courses designed to assist members implementing and maintaining ISO 20252, including:
- Preparing for your ISO 20252 Certification or Recertification Audit
- Preparing for your ISO 20252 Surveillance Audit
- ISO 20252 Sampling Annex A
- ISO 20252 Lessons Learnt – Considerations for Future Audits
- ISO 20252 + Privacy + Information Security Synergies
- Internal Auditor Training (Download Flyer)
Additional packages and material are uploaded monthly
ISO 27001/2 Information Security Management System | Update on AI
ISO 27001: 2022 Information Security Standard relies on ISO 27002: Annex A (93 Controls) to address risk management.
The management of Artificial Intelligence (AI) can be:
- incorporated into the ISO 27002 risk controls, and/or through
- joint compliance with ISO 42001: 2023 Artificial Intelligence and ISO 27001.
Alternatively, ISO 27090 is a recently released cybersecurity guidance standard for artificial intelligence that also works with ISO 27001 to manage AI. It can act as an extension to ISO 27001.
These are the options for organisations already certified to ISO 27001. Moving forward AI will need to be addressed to retain certification. How best to address it is a decision for the organisation to make.
Norine Cruse our Quality Consultant is available should members require advice or support regarding ISO 27001 and AI integration.