As you might have guessed, we're not against the use of AI during ISO 27001 preparation.
When well leveraged, we consider that it saves a lot of time.
There are plenty of things that ISO 27001 requires to do that can be delegated to an AI, especially documentation writing.
However, there's a pre-condition for a great human-AI teamwork.
Both the implementer and the AI must have a great knowledge of ISO 27001.
For the ISO 27001 Copilot, we took care of providing it the relevant knowledge.
But we still think you need to continuously enhance your knowledge of the standard.
Yes, AI will speed up your work. Yet, it won’t do the thinking for you. And, that's where a lot of people get stuck.
ISO 27001 is about applying the right controls in your specific context. It requires thinking. Strategic thinking about what risks exist. Critical thinking about which controls are actually worth implementing.
Turns out you can’t outsource thinking to AI.
So, how can you bridge the gap without relying entirely on automation?
- Valorize Educational Resources: Like Aron Lange’s lead implementer course (that's an affiliate link, i.e. we earn a commission if you buy from Aron). The course gives you a deep understanding and resources to implement ISO 27001.
- Use Practical Guides: Look into the soon-to-be-published ISO 27001 guide for SMEs. Such resources provide context-specific advice and break down complex processes into actionable steps.
- Context Matters: Always consider your own organizational context. It’s easy to follow guides or set up all controls. What's hard? Identifying which ones you need.
- Engage Stakeholders: Yes, it's about people. Use human interactions to gauge what's relevant and tweak your ISMS to fit real-world situations.
- Holistic View: AI can tell you “how,” but you decide the “what” and “why.” Ensure that every action you perform aligns with your goals.
- Critical Evaluation: Regularly question your ISMS. Is it effective? Are the controls relevant? Metrics, audits, and reviews are there for a purpose – use them wisely.
AI is perfect for automation.
You remain the brain who decides what to focus on.
Use both, but don't lose sight of what truly matters.
I hope this was helpful.
