Guest
Ya hice la fase de diagnóstico, en la parte de implementación hice macromejoras para abarcar los puntos que no cumple la institución, en una macromejora tengo la parte de liderazgo, que puedo desarrollar para cumplir los asquectos de liderazgo? Tomando en cuenta que el proceso es de lotería impresa.
what are the types of data that need to be calssified? Does each and evey physical asset, documnet, data need to be classified?
I attended your webinar on the integration between GDPR and ISO 27001 yesterday, thank you very much.
Is there anywhere you can see what ISO standards it is possible to be certified against? I have been looking but not been able to find it. You said yesterday that it is not possible to be certified against ISO 27701, which is why I am asking.
I am currently doing a thesis as my final paper in Danish Law School and I am writing on GDPR and ISO and how ISO can help demonstrate compliance to GDPR.
I have a question. I was speaking with my CEO today to align what it is we can do to show from the top management to the entire company that our ISO 27001 project is important and will ultimately reach and affect everyone. One idea we had is to create some kind of flyer, a poster, or a banner that we can use on various places probably online for the next couple of weeks, and then physically when we get back to our offices.
Is there something you might have off-the-shelf that can be leveraged to that extent?
Should I include assessed ISMS Opportunities and Risks in the Risk Treatment Table? I mean IS Management System itself related Opportunities and risks?