ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • LGPD and ISO 27001 conformity

    Good afternoon, I read several articles on the site. I am graduating from the IT Security course.
    I would first like to congratulate you for the article on ISO 27001. And second, ask for a material tip for analyzing the development of the theme of my LGPD and ISO 27001 TCC implementation.
    Thank you very much in advance

  • LGPD e ISO 27001 conformidade

    Boa tarde, leio vários artigos do site. Sou Graduando no curso de Segurança em T.I.
    Gostaria primeiramente parabenizá-lo pelo artigo sobre a ISO 27001. E segundo, pedir uma dica de material para análise do desenvolvimento do tema do meu TCC LGPD e ISO 27001 implementação.
    desde já agradeço.

  • Corrective action in ISO

    In the templates, you provided us, in 12 procedure for corrective action, there is nothing in the document on preventive actions, is that no longer an ISO requirement? The only thing in there is corrective actions, this is also reflected in the 12.1 form

  • List of Legal, Regulatory, Contractual and Other Requirements

    I assume that for each company other/different requirements are relevant. Right?

  • Number of controls for audit

    1 - One initial question I have is whether there is a “required” number of controls that need to be audited for a certification?  I was thinking that an auditor would check 15-20 randomly selected controls? 

    2 - Any thoughts or recommendations for how best to approach this would be helpful and appreciated!

  • ISO 27001 Control

    1. I wanted to know how we can measure the maturity of an ISO control when trying to assess its maturity level with something like CMMI.

    2. How can we measure how effective is a control and how mature? Any resources that can help?

  • Audit checklist

    For the audit checklist document, 10.3, we are just doing ISO27001, does the auditor need to complete the whole checklist?  Can pieces be done over time?  Can you just sample the checklist and issue a report to meet the standard?

  • Using ISO 27001 and 27017 to get GDPR compliance

    I wanted to know if it's not possible to use ISO 27001 and possibly 27017 to get to GDPR compliance so it's all embedded in a system as opposed to separate controls to cover a regulation

  • ISO27001 for a Cloud Service Provider

    I am looking to do ISO27001 for one of our businesses which offers Cloud Services only.  I presume ISO27001 should more than cover the services offered for this type of provider.  Would they be similar to a Data Centre Provider?

  • GDPR and ISMS

    I am now doing some exams for GDPR and in this course I've learned that ISMS is one of the strategies you can take. I have been in contact with some implementation stuff in ISMS. I would like to certify in ISO27001 but to cover GDPR which course is right for me?