{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"668: Michael Thomsen of Origin 84, Part Two - Reusable Compliance Policies, ISO 27001 Audits, and Building a Fractional GRC\/Strategy Bench","description":"In this Command Control Power episode, host Joe and guests discuss standards, policies, certification, and compliance with Michael Thomsen of Origin 84 in Sydney, continuing an ISO 27001 deep dive. Michael explains how policies are written to solve specific control problems (e.g., MFA) and can be reusable, while areas like data classification require tailoring based on a client\u2019s industry, legislation, contracts, and workflows; key discovery questions include where data is stored and shared, and what obligations contracts impose. The conversation contrasts frameworks (NIST, Essential Eight) and notes auditors verify that policies drive processes and are followed, emphasizing continual improvement through audits, risk\/incident tracking, and iterative remediation. Jerry and Sam share healthcare\/SOC 2 experiences and discuss shifting solo consultants from tactical support to higher-value strategic advisory\/account management, using fractional roles and partners. Michael outlines Origin 84\u2019s fractional model (financial controller, HR, strategy officer, plus legal\/CFO) and sourcing via professional networks, LinkedIn, and conferences like ACEs, where Michael will present on account management ","author_name":"Command Control Power \u2022 Apple Tech Support & Business Talk","author_url":"https:\/\/commandcontrolpower.com\/","html":"