- \n
- AI tools for project management<\/li>\n
- AI tools integrated in GRC software<\/li>\n
- Specialized AI-powered chatbots<\/li>\n<\/ul>\n<\/div>\n<\/div>\n
What types of AI tools will be available for consultants?<\/h2>\n
At the time this article was written (second half of 2023), the trends are such that the following types of AI tools are (or will be very soon) available to ISO 27001 consultants:<\/p>\n
- \n
- AI tools that help with project management \u2014 e.g., Notion.so<\/a> automatically creates summaries of project tasks (or any documents), while Fireflies.ai<\/a> automatically creates transcripts and to do lists; in the future, there will most likely be tools that will automatically communicate with project team members and perhaps resolve some less complex organizational tasks.<\/li>\n
- AI tools that will be integrated in GRC software \u2014 such tools will be able to speed up risk management, document writing, evidence collection, etc.<\/li>\n
- AI tools that are text based, and that are used for conversations \u2014 currently, these are in the form of chatbots.<\/li>\n<\/ul>\n
Because AI tools in this last category (AI-powered chatbots) are currently the most advanced, I\u2019m going to focus on them in this article.<\/p>\n
How can consultants use AI-powered chatbots for ISO 27001?<\/h2>\n
From my experience, AI-powered chatbots can help ISO 27001 consultants with the following:<\/p>\n
- \n
- Teach less experienced consultants about ISO 27001<\/li>\n
- Save time when checking things<\/li>\n
- Speed up implementation<\/li>\n
- Help with internal audit and pre-certification check<\/li>\n
- Create training materials<\/li>\n<\/ol>\n
I\u2019m going to show you several examples of how to do this using Experta, a specialized AI-powered chatbot-style knowledge base for ISO 27001 (Experta is currently free to use; you can sign up here<\/a>.)<\/p>\n
Teach less experienced consultants about ISO 27001<\/h2>\n
If you have a junior consultant who has just started to work in your consultancy, or if you are starting your own ISO 27001 career, you can save a lot of time by letting an AI chatbot do the teaching \u2014 try asking questions like these (click the question or the image to show the full answer):<\/p>\n
“What are the mandatory clauses in ISO 27001?”
![\"-\"](\"\/wp-content\/themes\/academy_v2.0\/assets\/icons\/external-link.svg\")
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-are-the-mandatory-clauses-in-ISO-27001.png\")
<\/a><\/p>\n“How to present ISO 27001 benefits to the top management?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-how-to-present-iso-27001-benefits-to-the-top-management.png\")
<\/a><\/p>\n“What is the purpose of ISMS?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-is-the-purpose-of-isms.png\")
<\/a><\/p>\n“What are the steps to perform corrective actions?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-are-the-steps-to-perform-corrective-actions.png\")
<\/a><\/p>\n“Create a learning program for ISO 27001 for a new consultant”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-create-a-learning-program-for-iso-27001-for-a-new-consultant.png\")
<\/a><\/p>\nSave time when checking things<\/h2>\n
Usually, during a project, a consultant needs to check several sources or simply brainstorm ideas \u2014 here\u2019s how an AI chatbot can help you with this:<\/p>\n
“Which Annex A controls cover incident management?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-which-annex-a-controls-cover-incident-management.png\")
<\/a><\/p>\n“What are the most common risks related to USB memory drives?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-are-the-most-common-risks-related-to-usb-memory-drives.png\")
<\/a><\/p>\n“How to protect against insider threats?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-how-to-protect-against-insider-threats.png\")
<\/a><\/p>\n“What is ISO 27019?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-is-iso-27019.png\")
<\/a><\/p>\nSpeed up implementation<\/h2>\n
Once you\u2019re further along in the implementation, you may sometimes need quick reminders on how to perform activities, or you might simply need a second opinion on how to complete a task:<\/p>\n
“What are the steps for performing management review?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-are-the-steps-for-performing-management-review.png\")
<\/a><\/p>\n“What inputs are needed for ISO 27001 management review?”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-inputs-are-needed-for-ISO-27001-management-review.png\")
<\/a><\/p>\n“Create a script on what should a consultant present at a management review meeting”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-create-a-script-on-what-should-a-consultant-present-at-a-management-review-meeting.png\")
<\/a><\/p>\n“How to review audit results during management review”
<\/a><\/p>\n![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-how-to-review-audit-results-during-management-review.png\")
<\/a><\/p>\n
- AI tools that help with project management \u2014 e.g., Notion.so<\/a> automatically creates summaries of project tasks (or any documents), while Fireflies.ai<\/a> automatically creates transcripts and to do lists; in the future, there will most likely be tools that will automatically communicate with project team members and perhaps resolve some less complex organizational tasks.<\/li>\n
![\"-\"](\"\/wp-content\/uploads\/\/sites\/5\/2023\/10\/ai-experta-what-to-include-in-management-review-minutes.png\")
<\/a><\/p>\n