ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Policy content

    "From BYOD Policy
  • Risk assessment report

    I already had a question about chapter 3.3 inside the report on risk assessment and risk treatment a few weeks ago. It was about the final reports where you explained to me that it relates to risk assessment and risk treatment. But I still don’t know which documents are meant when it comes to these final reports and the exact time period when they were created. I have a period of time when I did the risk assessment and risk treatment. But the final reports I don’t know what’s meant with that. It would be great if you could help me with this.
  • Sizing an project team

    In your experience how many people are needed to execute the project for an organization with 600 staff?
  • Can ISO 27001 and ISO 22301 be used together in a document?

    In the document when we were reading through it, it said we can use it for either/or like either ISMS or BCMS. So my question is is it possible to use it for both and put the word AND between ISMS and business continuity management system?

  • Questions about documents

    First question: I was wondering if Privacy Policy document is included with the ISO 27001/22301….or if it is only included with the EU GDPR. If only included with GDPR, can I use that privacy policy for all our ISMS/BCMS needs as well?

  • Sizing information security and cyber security team

    Cúal debería ser el número de personas que conformen el equipo encargado de la gestión de la seguridad de la información y cuántos de ciberseguridad?

  • Risk assessment approach

    I was reading this article from instructor located at this location…https://advisera.com/27001academy/blog/2016/04/04/iso-31010-what-to-use-instead-of-the-asset-based-approach-for-iso-27001-risk-identification/
  • ISO 27001 ISMS objectives

    I am looking for a basic outline of what a board member of a multinational needs to use to monitor their company's compliance with 27001. It does not need to be a technical document; rather what are the 4-5 key areas that a board needs to monitor and what are 2-3 criteria for each area.

  • ISO 27001 implementation challenge

    How challenging is it to implement this standard, in your own opinion?

  • Plans and procedures for teleworking

    What would be typical "plans and procedures" for teleworking, especially small vs large organization? I´d like to see a template or samples, thanks.