
WPA3-KCIA Radio · Single
NIST to Know. ISO to Go
Jarrett Heintz · 4:09
- Governance & Risk
- Everything, A to Z
Lyrics
- Before you certify, ya better know,
- From NIST to I-S-O, here we go.
- Risk, compliance, law and flow —
- These frameworks run the audit show.
- NIST to know, I-S-O to go,
- Legal tracks that steal the show.
- Framework flyin’, rules alignin’,
- Pass that test, no silver linin’!
- From co-bit deep to gee-dee-pee-ar fines,
- Let’s break it down one line at a time. ?
- Verse 1 – NIST to Know (say: "nist")
- Eight hundred dash fifty-three — set those controls,
- Assess and select to secure your goals.
- Eight hundred dash thirty-seven, set the risk frame,
- Categorize and monitor, play the game.
- Eight hundred dash one thirty-seven — monitor the beat,
- InfoSec checkups — don’t face defeat!
- And one seven one for contractors bold,
- Protect that data — break the mold.
- NIST to know, I-S-O to go,
- Legal tracks that steal the show.
- Framework flyin’, rules alignin’,
- Pass that test, no silver linin’! ?
- Verse 2 – ISO to Go (say: “eye-es-oh”)
- Twenty-seven-oh-one — cert if you please,
- Fourteen domains for your I-S-M-S keys.
- Twenty-seven-oh-two — control list pickin’,
- Security cooked like proper chicken.
- Thirty-one thousand — risk wide view,
- Map your mission with that risk crew.
- Eye-es-oh’s global, get it tight,
- Prep for the audit, sleep at night.
- Verse 3 – Legal Frameworks and Laws
- Say hip-uh and high-trust — health game tight,
- Protect that PHI, keep it right.
- Ess-oh-ex — financial stage,
- Sarbanes-Oxley locked that page.
- Gee-ell-bee-ay — banks, take note,
- Protect that data or miss the boat.
- Gee-dee-pee-ar — across the sea,
- Consent and rights for you and me.
- A-pec keeps data flowin’ fine,
- Across Pacific borders, stay in line.
- Oh-ee-see-dee and aye-see-pee-ay,
- Guidelines strong in the audit way.
- Pee-see-eye D-S-S — credit guard wall,
- Lock your card data, prevent the fall.
- See-eye-see-ay — north of the line,
- Audit strength — Canadian spine.
- Bridge – Risk & Governance Models
- Co-bit aligns your tech and biz,
- Control objectives, that’s what it is.
- Co-so makes your framework tight,
- Risk and control in broad daylight.
- Fair — quant the risk with dollars,
- Measure that impact, make them holler!
- Final Chorus – Strong Finish
- NIST to know, I-S-O to go,
- Legal hits with that audit glow.
- Framework dance, it’s not for show,
- It's how you prove your InfoSec flow.
- From eight hundred dash fifty-three to co-bit’s plan,
- Spit these bars like a governance stan! ?
- Study the names. Learn the flow.
- This is how compliance pros roll.
- Control it. Risk it. Map it. Show.
- Now ace that test. Go pro.
- Framework flow. Let's go. ?
- peace out ya'll