Compliance Season Without the Chase: Training Evidence for ISO 27001, SOC 2, and HIPAA

#1758879: Compliance Season Without the Chase: Training Evidence for ISO 27001, SOC 2, and HIPAA - Oct 29, 2026

Description:	Auditors judge your training control by the evidence behind it. When that evidence lives in an LMS export, a hand-updated spreadsheet and a folder of confirmation emails, the dates rarely line up, and fieldwork is where the gaps surface. In this session, Matt Lindley and Tom Richards cover what auditors check, then show a training program that produces its own evidence on a schedule. What we'll cover • What ISO 27001 auditors trace, from your risk assessment to the training people receive (Annex A 6.3 and Clause 7.3) • How SOC 2 Type II auditors sample across the full observation window, and why training delivered all at once can pass Type I and still fail Type II • What HIPAA requires for workforce training under the Security Rule and the Privacy Rule • An introduction to NINJIO's new HIPAA training track • A live walkthrough of one program, end to end: people added, training assigned, reminders sent and evidence reports delivered on a schedule, with nobody chasing completions We'll also walk through the Framework Mapping Cheat Sheet, which shows what eight frameworks ask of awareness training and which NINJIO content supports each one. Everyone who registers gets a copy. Who should attend Security, GRC and compliance leaders who own ISO 27001, SOC 2 or HIPAA evidence, including healthcare organizations and their business associates. IT and operations leaders who get pulled into audit prep will find it useful too, and audit firms and GRC consultants are welcome.
More info:	https://ninjio.zoom.us/webinar/register/4217926887988/WN_WZXA3slJRum-6m-T4rPsZw#/registration

Description:

Auditors judge your training control by the evidence behind it. When that evidence lives in an LMS export, a hand-updated spreadsheet and a folder of confirmation emails, the dates rarely line up, and fieldwork is where the gaps surface.

In this session, Matt Lindley and Tom Richards cover what auditors check, then show a training program that produces its own evidence on a schedule.

What we'll cover

• What ISO 27001 auditors trace, from your risk assessment to the training people receive (Annex A 6.3 and Clause 7.3)
• How SOC 2 Type II auditors sample across the full observation window, and why training delivered all at once can pass Type I and still fail Type II
• What HIPAA requires for workforce training under the Security Rule and the Privacy Rule
• An introduction to NINJIO's new HIPAA training track
• A live walkthrough of one program, end to end: people added, training assigned, reminders sent and evidence reports delivered on a schedule, with nobody chasing completions

We'll also walk through the Framework Mapping Cheat Sheet, which shows what eight frameworks ask of awareness training and which NINJIO content supports each one. Everyone who registers gets a copy.

Who should attend

Security, GRC and compliance leaders who own ISO 27001, SOC 2 or HIPAA evidence, including healthcare organizations and their business associates. IT and operations leaders who get pulled into audit prep will find it useful too, and audit firms and GRC consultants are welcome.

More info:

https://ninjio.zoom.us/webinar/register/4217926887988/WN_WZXA3slJRum-6m-T4rPsZw#/registration

Date added	Oct. 24, 2026, 3:18 p.m.
Source	Zoom
Subjects	Compliance regulations / Ethics - Various ISO 27000 / 27001 - 27019 - ISO 27001:2022 - ISO 27002:2022 PodCasts / Webcast / Webinar / eSummit / Virtual Event etc. SOCs / Security Operations Centers
Venue	Oct. 29, 2026, midnight - Oct. 29, 2026, midnight