ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • 15.2.2 managing changes to supplier services

    15.2.2 managing changes to supplier services - ee have a major non-conformity on this point. Can you advise on remediation in a timeline of 8 weeks?
  • Inventory management process

    If we were talking about the audit, I am currently writing a thesis on the audit of the inventory management process
    and I have some gray areas that I would like to clear up.

    I have to carry out an opportunity audit of the inventory management model in a company and that puzzles me as to the audit model that I have to bring, even adopt. On this I would like to benefit from the advice of an expert in the field.

  • Supplier Policy for Suppliers and Partners

    I would like to ask here regarding the Security Clauses for Suppliers and Partners.
    1. Do we need to make a Supplier Policy based on the attached Points listed in the A.15.2 Document? If yes, do we have to get it done through aLegal representative of the Company?
    2. Can you also give an overview of for what Suppliers will this Policy be made? For e.g.  The Computer manufacturer providing the laptops and Accessories to the Company or External Companies with whom the Organization is working together.
    3. Is it mandatory to have a Supplier Security Policy?
  • Combination of ISMS and BCMS

    Right now I'm working on my master's degree in XYZ and my master's thesis is about the simultaneous implementation of an ISMS and BCMS in an organization. I'm working especially about synergies of both Management-systems.
    So I would like to know, what is your opinion about the simultaneous implementation of both systems? Is there a possibility to reduce resources? Or are both systems different to handle?

  • Context document

    In which document is the Context? 
    Can you please send to me a good context document?

  • ISO 27001 and ISO 27799

    My company has ISO 27001 and wish to get the ISO 27799 is this possible? I understand that 27799 is a companion but I see it described as a companion to 27002. to my Understanding 27001 is the standard not 27002 so Can 27799 be a companion to 27001?

  • Business impact analysis

    Can one rely on the results of business impact analysis without performing a risk assessment

  • External documents

    We are implementing an ISMS helped by your ISO27001 documentation. In the first document (00_Verfahren_zur_Lenkung_von_Dokumenten), a post entry registry for external documents is asked for. Could you please give me examples of the kinds of documents that would have to be registered there?

  • Route to implement an ISMS

    Buenas tardes. Me gustaría saber cuál es la mejor ruta para implementar un SGSI en una empresa dedicada al giro de la publicidad en XYZ.

  • Toolkit content

    There are three documents included in the pack:

    • RA and TM Cloud
    • RA and TM Premium
    • RA and TM Integrated.

    Can you please tell me the difference between these documents?