ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Expert

Rhand Leal

4151
Discussions
Expert

Carlos Pereira da Cruz

1915
Discussions
Expert

Dejan Kosutic

365
Discussions

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit ISO 9001 Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001/Risk Assessment Table ISO 9001:2015 ISO27001
Select
CREATE NEW TOPIC +
Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • ISO 27001 Certification

    I have just obtained my CISSP, working on CISM what would you recommend that I do to start progress towards becoming an ISO 27001 Standards consultant, what would my next best certification be? I am looking at getting my PMP after completing the CISM.

  • Submitting records for approval

    Just getting started writing policy for ISO 27001. I have completed the Context, Requirements and Scope document. Is it better to move on and create/finish more documents and approve/distribute all at once with management or start document approvals now risking updates/adjustments as more progress is made?

  • Difference between strategies and solutions in ISO 22301

    Can you help me in understanding what is the difference between strategies and solutions which are mentioned in BCMS ISO 22301:2019?

  • Questions related to Controls

    1. When doing the Access Control policy we found ourselves relatively short of content in the policy document (this has not appeared to be the case in all policies we’ve worked through). Are you able to give us any guidance on where we could find resources with more prescriptive control examples, than are found in the ISO 27002 standard? The challenge we seem to have is the policies are not all encompassing in terms of coverage of the controls, and when we turn to the controls in the standard, the controls appear quite vague in some cases. Is there somewhere a next level down of control examples? Any comments / insights you can offer around this would be appreciated.

    2. Is there anything at all stopping us from incorporating the controls found in CSA CCM into our documentation suite? Many map to ISO controls, but in some cases appear to be more specific.

    If we were doing this, do you have any suggestions or comments we should keep in mind when approaching this?

     

  • System Acquisition Development and Maintenance

    Regarding 27001 Toolkit\08_Annex_A_Security_Controls\A.14_System_Acquisition_Development_and_Maintenance:

    We do not do any software development. Is it safe to say that we do not need to complete this Policy and Appendix on Specification o Requirements?   If so, do we note this elsewhere in the documentation?

  • Disaster recovery ISO 27031

    We are starting out to begin our ISO process and we have chosen to begin with disaster recovery ISO27031 - what information/guidance can you share or recommend at this stage of our process.

  • List of most common business-critical information assets

    I am particularly trying to get some help with a list of most common business-critical information assets. Not the hardware and software assets.

  • Information security career

    Thank you for your lectures on ISO 27001,

    Sir I am a certified LA in ISO 9001 2015 and certified ISO 14001 and 45001 Auditor, B.sc, MBA

    in short, I don't have any experience in ISMS, but I want to pursue my career in ISMS, is it the right thing to do knowing that I don't have any IT background, and if yes how should I start ...

    what other skills should I learn to make a good international career out of ISMS...

  • How to calculate RTO and RPO

    How to calculate RTO and RPO?
Page 117 of 544 pages