Guest
What I need is the ISO 22301 compliance matrix, to identify the Implementation Guide. If possible, complete ISO 22301 standard.
I am currently managing the quality department of a medium size company. xx employees, xx sites. We are ISO 9001, 14001, 27001 and eIDAS certified.
We are currently using excel to do our different risk analysis. Quite efficient... but not really user friendly. For the last couple of months, I have been trying to find out if anyone would have thought of something more dynamic. Without much success I must admit.
Would you mind advising if you ever came across a solution dedicated to risk analysis ? One that could be implemented in small businesses, practicable, affordable, not requiring 10 consultants working weeks on it to implement it ?
Any advise would be welcome.
How CIA Triage And privacy severity of the asset (Asset Value) to be aligned along with Impact & Probability in risk management?
I know that generally the Justification for selection a control can be a risk, Top management solution, or legal requirement.
Can Justification also be "Best practices in IT", or "IT Management decision"? Or it must be one of the 3 mentioned above?
Thank you!
Thanks for this. Is there any where that I can get this information online while waiting for your webinar?
I have an urgent need to define the scope for one of my potential client but I can not wait until your webinar on the 16 Dec.
Appreciate if you can share some on-line references for the similar topic.
I noticed from the Advisera blog that there had been a significant increase in the numberof organisations certifiying to ISO 28000 (Information Security in Supply Chain). Does anyone know why this might be? II've filed this under ISO 27001 as that's the closest standard, I think)
1. How long can the background preparation stage for ISO 27001 Certification take?
2. Can I make my own assessment in this regard without consulting the policies, regulations and expectations of the company directors?
Quick question regarding the toolkit, there is nothing covering point 8.3 of annex A regarding removable medias management ?
dear support iam IT MANAGER in oil and gas company what kind of assets scheme do i create to collect both manual and digital information from all my organization departments , need sample .
I'm new to Information Security, and I have read Document policy, but I have concerns about the Backup responsibility.
Is the DBA responsible to take and store the Backup? or should be another responsible for it?