Auditing security, privacy and AI governance separately can lead to repeated interviews, duplicated evidence requests and fragmented findings.

This session presents an integrated approach to auditing ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001. Rather than reviewing the same management process three times, auditors examine shared processes such as risk assessment, incident management and corrective action through three distinct lenses: information security, privacy and AI governance.