Guest
Hi, what is the document package that will help me get PCI-DSS certification? What we need is the templates that will help us through the documentation process
I am serving in the military and currently conducting transition to the civilian world. I have been in charge of Info sec and conducting audits for the past 14 years but applying MoD policy and not ISO 27001. I was looking to do some civil training to gain required goals for my CV and future roles and was informed that ISO Lead Auditor would be the most suitable. Do the courses and exam provided through this site provide recognized accreditation for Info Sec roles?? Could you advise on best courses for my situation?
Please see attached documents received as a reference received from Advisera. I’m looking at the document “Risk Assessment and Risk Treatment Methodology-Cloud”, however this document does not mention ISO 27017 for cloud environments. Will you please send us the correct documentation? I’m also looking at the specific requirements covered in each document in its own section 2 – Reference Documents which does not mention cloud environments ISO 27017.
We are well underway with our work but I need a little bit of assistance. Do you have or can you point me in the direction of some standard business objectives for BCMS? I am struggling to write these and want something that looks good being client-facing.
We are providing cloud hosting services to various companies, and we do not know which kind of data they are processing on our servers. How do we fill out the Policy for Data Privacy since we do not have access to our customer data?
1. I am at a cross road in my 30+ year career in Accounting and I'm looking for a change. What are the requirements to become an ISO 27001 lead implementer and how can I become an independent consultant?
2. Will your course prepare me to take the ISMS with Exemplar Global?
Is there any specific requirement from ISO 27001 for calibration?
Can this requirement for 'Independent Review' be satisfied internally? That is, review of the ISMS policies and procedures by an in-house team that is not directly attached to the ISO 27001 effort?
Can this requirement be satisfied through the ISO 27001 Certification process, citing the 2 minor audits between major certification as our Independent Review?
Otherwise, what is the best course of action to meet this requirement, and could we gain and keep certification without using this control?