Guest
Como saber quais procedimentos realmente preciso escrever?
Do we have to put the exact location addresses of our sites that are within scope?
We have quite a few offices so this would make the scope become a large document.
1. What is the ideal KPI's to measure the effectiveness of ISMS in an organization?
2. Can the internal auditor participate in the ISMS activities and take some responsibilities e.g review Policies and standards, develop and create missing documents, be an ISMS Advisor...etc
Today I consult a large institution, where we are equalizing control systems of logical and physical access, I am in search of content about physical access (standards, good practices, axes of analysis, premises), but it is a very complicated content to achieve .
Do you have any indication of content?
Hoje presto consultoria a uma grande instituição, onde estamos equalizando sistemas de controle de acesso logico e fisico, estou na busca por conteudos sobre acesso fisico (normas, boas praticas, eixos de analise, premisas), mas é um conteudo bem complicado de se conseguir.
Voce teria alguma indicação de conteudo?
sincerely hope my email finds you well and safe. Just want to pick your brain about implementing an ISMF in a greenfield site.
1 - What are the key considerations when implementing an ISMF such as the ISO 27001 in a greenfield site – i.e. an organization where there are nothing in terms of security policy or practice. Would we go through the normal workflow of implementing ISO 27001 or are there deviations?
2 - Can you suggest any additional resources I could use for greenfield implementation?