[Autogenerated] thinking now,
Really Off your to So we've become compliant weights we believe
we're maintaining compliance is an organization.
What advice do you have?
Is an assessor on preparing for your second assessment?
I'd say to the extent that you could maybe dry runs some of those
tasks that you know the assessor is going to ask for.
Uh, that's helpful, right?
If you know kind of who your teams are, right, Who is going to be involved?
Particularly.
Maybe that's changed, right?
If some people have turned over or other people have taken on certain
responsibilities making sure that they're aware Hey,
this is gonna happen, you know, Could be very helpful on.
And then if you've got a compliance person or ah, you know, PC idea SAS sort of.
Ah, coordinator in your organization, people say,
Hey, we're gonna you know,
we know they're gonna ask us about vulnerability management,
you know?
Can you show me eso We can solve problems now?
Right to your point.
Can we check on this sooner than later?
Find problems sooner than later?
Resolve them sooner than later.
I think that would be extremely helpful.
Uh and then the other thing is where there are
changes coming up in the organization.
Um, hey,
we know we're going to deploy this new thing A We
know our strategic plan involves.
Now we need a mobile app.
Or now we need, you know, a bunch of new Web server technology.
Or now we need whatever it is we're going to do in
the next 12 months in the next, you know,
whatever, period.
Uh, can we bring some of that to our assessor up front?
And some assessors will charge you for that.
Right?
And you obviously want to kind of work that out first.
Uh,
and some will not because they want to make sure that that
business relationship continues smoothly and that that
subsequent assessment goes smoothly.
Eso work with your assessor about how to handle those
kinds of questions in that interim period.
Okay, so that sounds to me like a Q s.
A is for life, not just for your assessment day.
Well, you should be if you're doing business change,
but you're gonna do a mobile apple, right?
You're going, Teoh, move the data center or something like that.
If you're going to do change even between assessments,
ring of accusing us for advice that I would I would strongly counsel that right?
He is a Q s A.
For life.
I mean, sure, you can rotate assessors.
You can find a new one if you're dissatisfied with your existing one.
Fine.
Uh, but it's more the point that PC idea says is every day.
Yeah, uh, on.
And realistically, if you're doing this right,
you know, the hard work is what you're doing,
all you know, all of those days.
And then the assessment is just sort of the Labour Day parade.
I actually think you just made a great point.
PC Idea Says is an everyday thing.
It's not a once a 11 day at the end of the year when the assessor comes
and it has to be baked in your business processes,
it has to be baked into changes to be baked into your organization.
Absolutely great, Jacob.
Thank you very much for your insight into how to achieve
and maintain PC ideas as compliance.
Thank you.