Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Business Continuity Plan
I really appreciate your help. Currently I am in process of doing Business Continuity Plan for my work place so if you can share me any info. it will really help me a lot. -
SOA Template
Is the SOA template filled with sample Control Objectives and Implementation Methods for each of the Annex A controls as if they were all applicable? -
Relationship between Risk Treatment Plan and SOA
I want to ask about implementation ISO/IEC 27001:2013. I don't understand about relationship between risk treatment plan and SOA. Can you explain to me? I need more knowledge. -
Operating procedures for IT Management
I read in your checklist of mandatory documents and you wrote A.12 Operating Procedures for IT Management. Is it only for IT or should Non-IT procedures be documented as well? -
Context and interested parties
Hi there, we are currently looking at the organisation context and interested parties. We are not sure if to document separately or all as part of the scope. -
Get your managements approval
What are the key points that one can address to help get the board to support BCM? -
Protect utility programs
I want to ask what in this control (A.9.4.4) we could write as a small IT company based on developing where everybody has full access and we all are members of local administration group. -
Scope of ISO 27001 for a software project
Ours is a small company which is planning to go for ISO 27001 certification. For a company to get ISO 27001 certified, can they go ahead and get only one software project ISO 27001 certified or do they have to get the full organization ISO 27001 certified? Please do let us know. -
Personal computer in the Inventory of assets
If an employee using the personal computer in the company, such equipment must be included in the inventory of assets? -
Auditor findings - Opportunities for improvement
The final auditors report has a lot of comments known as Opportunity of improvement (OFI) some are makes since and some are not to us. One of my advisers told me that, if I didn't do anything regarding these OFI the auditor will raise theme as minor NC in the next visit, is that true and I have to do something?