ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Expert

Rhand Leal

4151
Discussions
Expert

Carlos Pereira da Cruz

1915
Discussions
Expert

Dejan Kosutic

365
Discussions

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment ISO 9001 Product: ISO 13485 Documentation Toolkit ISMS register of requirements Internal Audit Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit ISO Product: ISO 27001 Internal Auditor Course
Select
CREATE NEW TOPIC +
Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • Policy for secure development

    I have a question about the Policy for safe development. The policy talks in chapter 3.4 about control A.14.1.1.The reference documents above do not include the control. Can I add control A.14.1.1 to the reference documents and the policy for safe development also as the implementation method for control A.14.1.1 inside the SoA?

  • Procedure for measurement

    I was wondering if there should be a procedure for measurement of the ISMS in the ISO 27001 documentation package. I don‘t seem to find it.

  • RACI Matrix

    f I have a policy with certain users. Are these users the „responsible“ in a RACI-Matrix or will they only be the „informed“ ones which must comply with the policy?
    Would the „responsible“ person, in that case, be the person who wrote and maintained the policy? Or would both fall into the category „responsible“?
    My specific case is the „policy for safe development“. In that case, our programmers and system administrators are the users of this policy. Are the programmers and system administrators, in that case, the responsible people or just the informed ones that these policies exist and that this policy must be followed?

  • Policy for use of cryptographic

    Requiero un asesoramiento sobre como debe documentarse las políticas sobre criptografia. Esto para llegar a una certificación de ISO 27001.

  • Auditor costs

     Do you know how much usually ISO auditors likely cost?

  • Assets in the cloud

    When developing the policy for our inventory of assets, the question came up around how do we inventory ephemeral assets in the cloud? Some servers are spun up when the extra compute is needed, then they are torn down automatically and are gone. Do we need to account for those somehow as well?

  • ISO 27001 and NESA requirements

    Is ISO 27001 a prerequisite to comply with NESA requirements

  • Filling SoA

    Meses atrás tuvimos una call para hablar sobre el proceso de certificación. Revisando Conformio encuentro un campo “Objetivos de Control” sobre el cual no tengo mucha claridad para diligenciarlo. Por lo anterior, agradezco si me puedes compartir algunos ejemplos de la información que debe ir en este campo.

  • Business Continuity and Disaster Recovery Plans

    I've purchased several of your ISO 27001/23001 templates and have a question. Currently working on Business Continuity and Disaster Recovery. It seems that the DR Plan template (including the 'Appendix 6' version) has a lot of information that's redundant with the BC Plan template. Should I really duplicate all of that, or is it common practice to include ONLY the 'Necessary Resources' and 'Recovery Steps' as Appendix 6 (DR Plan) within the BC Plan? Please advise. Thank you!

  • Cybersecurity audit

    But still I have some doubts here :

    My past work experience is on the network and server monitoring and does not have any experience of coding and scripting. Can I do this certification?

    I have seen cybersecurity personnel doing coding and scripting stuff, so I have this question longing in me. Please guide me.
Page 207 of 544 pages