ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit ISO 9001 Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001/Risk Assessment Table ISO 9001:2015 ISO27001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

Change management

May I ask if change management is required by ISO 27001? If yes, could you please share your resources with me?
Is it necessary to supply the assessor with a record of the router configuration?

Hi. I have a question relating to ISO27001. Under an ISO audit, is it necessary to supply the assessor with a record of the router configuration?
ISO 27001 Asset-based risk assessment

Quick question, please. When doing an ISO 27001 Asset-based risk assessment, do I keep the assets that have no impact on information security still in the risk assessment matrix or do I only keep assets that have an impact on information security
Define and formalize a Top Management involvement strategy

Hello,

Can you please advise me how to define and formalize a top management involvement strategy?
Information Security Incident or Business Continuity Disruption

If a customer has a business continuity disruption that affects the availability of information, must they log it as an InfoSec incident AND a BCMS Disruption? How should they go about assessing which system to manage it under?
List of referenced risks and numbers

)n the example of the Risk Treatment Plan used in the ISO 27001 online training, there was mention of reference to risks like:-
Risk no 16. Unavailability of electronic records due to accidental loss.
Risk no 32. Laptops could be stolen by external persons.
How do I get a list of this referenced risks and numbers?
Key elements of ISO 27001

he Ministry of Justice is requiring ISO27001 of the charities providing resettlement services, some as small as £100k turnover.

I have been asked, for tomorrow, to explain it to them. What are the key elements that I could explain in 5 minutes?

Looking online i see a lot about process and reports, not much about what technology they have to have in place.

Hope you can help!
Main challenges in the implementation of ISO 27001

What are the main challenges in the implementation of ISO27001?