ISO 27001 & 22301 - Expert Advice Community

Document control - do we need that?

Dear support,

I see that Document Control is not on the list of mandatory documents.

Do we still need that division by confidentiality levels, or we can proceed without this procedure?

Or maybe it is highly recommended?

We are already 9001 certified, and not using the Document control procedure there.

Thank you!

Adaptation for small medico-social establishments

What adaptation for small medico-social establishments?

Legal requirements related to 27001 in the UK

Which are legal requirements related to 27001 in the UK?

Implementation of ISO 27001

What will be expected of a marketing position in the implementation of ISO 27001? Are there any documents that need a marketing role's attention?

Scope of areas under ISO 27001

1. Kindly send the scope of areas under ISO 27001. 

2. Does it cover all areas under IS Audit

Table Top Exercise /Drill Validity in meeting ISMS Certification

"Our organization has achieved ISO27001:2013 certification for few years back for a Data Center (DC). Recently, we have established a Security Monitoring Center (SMC) and we are exploring to have the SMC being certified with ISO 27001.

We are considering to extend the existing DC ISMS Certification scope to the SMC or to have the SMC to gain a separate ISMS certification.

Below are my doubts that requires your expert advice:
a) Would it be fine to have the same ISMS team who take care of DC ISMS certification to manage the SMC ISMS Certification programme?

b) Would it be fine to deploy the existing relevant DC ISMS SOPs to the SMC ISMS Certification? Meaning that we maintain a single set of SOPs but to be used for two separate ISMS Certification;DC and SMC respectively.

c) What are the advantages and disadvantages to maintain a single ISMS Certification for both centers versus each center has its own ISMS certification?

ISO standard for Data Governance