ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Expert

Rhand Leal

4151
Discussions
Expert

Carlos Pereira da Cruz

1915
Discussions
Expert

Dejan Kosutic

365
Discussions

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment ISO 9001 Product: ISO 13485 Documentation Toolkit ISMS register of requirements Internal Audit Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit ISO Product: ISO 27001 Internal Auditor Course
Select
CREATE NEW TOPIC +
Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • List of Legal, Regulatory, Contractual and Other Requirements

    I assume that for each company other/different requirements are relevant. Right?

  • Number of controls for audit

    1 - One initial question I have is whether there is a “required” number of controls that need to be audited for a certification?  I was thinking that an auditor would check 15-20 randomly selected controls? 

    2 - Any thoughts or recommendations for how best to approach this would be helpful and appreciated!

  • ISO 27001 Control

    1. I wanted to know how we can measure the maturity of an ISO control when trying to assess its maturity level with something like CMMI.

    2. How can we measure how effective is a control and how mature? Any resources that can help?

  • Audit checklist

    For the audit checklist document, 10.3, we are just doing ISO27001, does the auditor need to complete the whole checklist?  Can pieces be done over time?  Can you just sample the checklist and issue a report to meet the standard?

  • Using ISO 27001 and 27017 to get GDPR compliance

    I wanted to know if it's not possible to use ISO 27001 and possibly 27017 to get to GDPR compliance so it's all embedded in a system as opposed to separate controls to cover a regulation

  • ISO27001 for a Cloud Service Provider

    I am looking to do ISO27001 for one of our businesses which offers Cloud Services only.  I presume ISO27001 should more than cover the services offered for this type of provider.  Would they be similar to a Data Centre Provider?

  • GDPR and ISMS

    I am now doing some exams for GDPR and in this course I've learned that ISMS is one of the strategies you can take. I have been in contact with some implementation stuff in ISMS. I would like to certify in ISO27001 but to cover GDPR which course is right for me?

  • ISO 270001 standard implementation

    If the company has a server room, is it mandatory to have a disaster recovery site to be certified?

  • ISO 27001 stakeholders

    Who are iso 27001 stakeholders? How do we identify them? Are top managers included in the ISMS scope?

  • Business Impact Analysis report

     By the way, does this (ISO 22301 Business Impact Analysis Toolkit) come with an actual sample Business Impact Analysis report? I could find in the toolkit the document named as the client mentioned so I wanted to check if the document is named differently or it's not included in the toolkit.
Page 174 of 544 pages