ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Mandatory procedures

    Como saber quais procedimentos realmente preciso escrever?

  • Offices within scope

    Do we have to put the exact location addresses of our sites that are within scope?

    We have quite a few offices so this would make the scope become a large document.

  • Questions for ISMS

    1. What is the ideal KPI's to measure the effectiveness of ISMS in an organization?

    2. Can the internal auditor participate in the ISMS activities and take some responsibilities e.g review Policies and standards, develop and create missing documents, be an ISMS Advisor...etc

  • Access control

    Today I consult a large institution, where we are equalizing control systems of logical and physical access, I am in search of content about physical access (standards, good practices, axes of analysis, premises), but it is a very complicated content to achieve .
    Do you have any indication of content?

  • Access control

    Hoje presto consultoria a uma grande instituição, onde estamos equalizando sistemas de controle de acesso logico e fisico, estou na busca por conteudos sobre acesso fisico (normas, boas praticas, eixos de analise, premisas), mas é um conteudo bem complicado de se conseguir.
    Voce teria alguma indicação de conteudo?

  • Implementing ISO 27001 in a greenfield

     sincerely hope my email finds you well and safe. Just want to pick your brain about implementing an ISMF in a greenfield site.

    1 - What are the key considerations when implementing an ISMF such as the ISO 27001 in a greenfield site – i.e. an organization where there are nothing in terms of security policy or practice. Would we go through the normal workflow of implementing ISO 27001 or are there deviations?

    2 - Can you suggest any additional resources I could use for greenfield implementation?