ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Expert

Rhand Leal

4151
Discussions
Expert

Carlos Pereira da Cruz

1915
Discussions
Expert

Dejan Kosutic

365
Discussions

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit ISO 9001 Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001/Risk Assessment Table ISO 9001:2015 ISO27001
Select
CREATE NEW TOPIC +
Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • ISMS audit fidings

    Sorry, i'm reaching you for a Quick answer since i'm not updated with the current classification of findings for ISMS. Still current opportunity for improvement, observation, minor and Major NC?, or just NC & OBSERVATIONS?.

    I have Been looking for a response but not sure, several opinions and i'm confident that you could help me.

  • Polices version 27001

    is it a nonconformity if the polices version numbers not equivalent according to iso 27001?

  • ISO 27001 controls

    ello, could you explain why in this article https://advisera.com/27001academy/iso-27001-controls/

    you have mentioned only controls from A5? What are the A1 - A4 controls about? I cannot find the information on this.

  • ISO 27001 certification benefits

    As a managed service provider with ISO27001 accreditation, how does this help a customer who has a requirement that their provider is accredited with ISO27001?

  • 7 Controls in the A.6

    Just to ask what are the 7 controls in the A.6

  • Measures Appendix A

    1 - we are in possession of your toolkit for ISO 27001 and are in point 6 (declaration of applicability). The 114 specified measures are to be checked for applicability. For us, however, the question arises as to whether all measures really have to be applied, since theoretically quite a few of them could be used or whether only suitable measures have to be defined for the risks that we have assessed with risk levels 3 and 4 (unacceptable risks).

    2 - In addition, we would like to know whether there are any legal regulations in Germany to which we must pay special attention in the course of the introduction of Iso 27001.

  • Complying with ISO 27001 and EU GDPR

    Can an IT company with 1 employee and working with freelancers/consultants be compliant with iso27001 and gdpr?(Gdpr requires a data privacy officer)

  • ISO 27001: DevOps toolchains

    How can ISO 27001 be granted if all changes are only visible in DevOps toolchains? Changes are no longer approved and implemented, only playbooks in Jenkins, Ansible, Docker or OpenShift are started. Can these tools be viewed as a certified management system?

  • BCP/DRP

    Just considering with the threat of hackers and cybersecurity being rampant now, how to approach the BCP/DRP in my planning?

  • FCS security governance critical success factor

    I want to write a risk assessment table , do we include the asset category, CWE, vulnerability, likelihood , impact and risk in the table column or not
Page 116 of 544 pages