ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Collection of evidence

    Can you please explain the implementation of the Point mentioned in the Doc A.16_Incident_Management_Procedure_27001_EN.

  • Scaling implementation of ISO 22301 to facilitate implementation

    How can we best scale the implementation of ISO 22301 to facilitate implementation in a range of countries and locations ranging from countries with a presence of approx. 10 people to countries with >10,000 people across multiple business streams and locations?

  • ISMS scope - IT admins out of the scope?

    Dear Advisera support,

    We’ve bought the toolkit – thank you!  -  and I have a couple of questions regarding ISMS Scope:

    1. We want to restrict the scope to one software support service only. There are about 100 employees working on this support service with customers. Could we define the Scope as a service?
    2. There are 5 office locations. Should we name exact addresses or just cities?

    3. There are two servers in the cloud for the service, they are administered by our IT admins, so they are asset owners for them. The question is: can IT system administrators be not in the scope? Or should all the assets/asset owners be in the scope?

  • Conducting ISO 27001 to multiple organizations from one platform

    we are an IT company conducting ISO 27k to multiple organizations, can we manage all from 1 platform?

  • Security policies for cloud environment

    As my security and compliance team are preparing annual policy review.

    Can you guide me some security policies for cloud environment, controlled data border  ( PaaS, SaaS … ). For example, in ***, the State Bank requires data must be accessed by the government when necessary (data center in ***...)

  • Question about ISO 27018 certification

    I am trying to determine if ISO 27018 is certifiable same as ISO27001. If not how are companies saying they have a certificate. How does that work?

  • Aligning business strategy to ISMS

    How do you align business strategy to ISMS?