ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Leadership requirements

    Ya hice la fase de diagnóstico, en la parte de implementación hice macromejoras para abarcar los puntos que no cumple la institución, en una macromejora tengo la parte de liderazgo, que puedo desarrollar para cumplir los asquectos de liderazgo? Tomando en cuenta que el proceso es de lotería impresa.

  • ISO High-Level Structure for standards

    I know that the new HLS specification structure consists of 10 clauses .. and this is derived from the concept of the continuous improvement cycle (PDCA), and when the specification pane is set on the improvement cycle, we find that some sources considered clauses (7 and 8) represent (DO) while other sources considered that clause (8) alone represents (DO) and clause (7) will be within PLAN . I wish to give me the correct and official opinion of this case
  • Classification of information

    what are the types of data that need to be calssified? Does each and evey physical asset, documnet, data need to be classified?

  • GDPR & ISO 27001

    I attended your webinar on the integration between GDPR and ISO 27001 yesterday, thank you very much.


    Is there anywhere you can see what ISO standards it is possible to be certified against? I have been looking but not been able to find it. You said yesterday that it is not possible to be certified against ISO 27701, which is why I am asking.


    I am currently doing a thesis as my final paper in Danish Law School and I am writing on GDPR and ISO and how ISO can help demonstrate compliance to GDPR.

  • ISO 27001 project presentation

    I have a question.  I was speaking with my CEO today to align what it is we can do to show from the top management to the entire company that our ISO 27001 project is important and will ultimately reach and affect everyone.  One idea we had is to create some kind of flyer, a poster, or a banner that we can use on various places probably online for the next couple of weeks, and then physically when we get back to our offices.

    Is there something you might have off-the-shelf that can be leveraged to that extent?

  • Risk Treatment Table

    Should I include assessed ISMS Opportunities and Risks in the Risk Treatment Table? I mean IS Management System itself related Opportunities and risks?