Guest
In the document when we were reading through it, it said we can use it for either/or like either ISMS or BCMS. So my question is is it possible to use it for both and put the word AND between ISMS and business continuity management system?
First question: I was wondering if Privacy Policy document is included with the ISO 27001/22301….or if it is only included with the EU GDPR. If only included with GDPR, can I use that privacy policy for all our ISMS/BCMS needs as well?
Cúal debería ser el número de personas que conformen el equipo encargado de la gestión de la seguridad de la información y cuántos de ciberseguridad?
I am looking for a basic outline of what a board member of a multinational needs to use to monitor their company's compliance with 27001. It does not need to be a technical document; rather what are the 4-5 key areas that a board needs to monitor and what are 2-3 criteria for each area.
How challenging is it to implement this standard, in your own opinion?
What would be typical "plans and procedures" for teleworking, especially small vs large organization? I´d like to see a template or samples, thanks.