Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Mandatory clauses
I have read your books that I purchased on: -
Certification holder
Hi, I have a client who is seeking to be certified. However, the business is part of a larger company network. They desire to have the larger company be on the certificate, when they seek certification. Could you advise what the issues are in relation to this? They will still define the scope based on the actual assets impacted. It is just that the certificate would be issued to the holding company? -
Major and minor nonconformities
Gostaria de saber se a definição de não conformidade maior e menor apresentada no artigo abaixo é baseada em alguma referencia normativa? https://advisera.com/27001academy/pt-br/blog/2014/06/04/nao-conformidades-maiores-vs-menores-na-auditoria-de-certificacao/ -
Implementing ISMS in other Business Dept.
Hi I have implemented ISO 27001 in IT dept. as scope and I have successfully implemented and got certified.Now I need to increase my scope to other departments. I need to know how can I do it ? How I will go the gap assessment ? What are the controls that I should do the gap assessment as most of the information processing systems lie within the IT dept. What information I have to protect as the information within other dept. will be confined to paper assets. Please advise me what approach should I take to extend my scope. Thanks -
ISO and IEC
Is it accurate to refer to the Standard as ISO 27001 whereas it's reference number is ISO/IEC 27001? -
ISO standard for publishing industry
Is there an ISO standard for placing records and documents into different types of categories for the publishing industry? -
Decommissioning Apps/Software
Hi, Where can I find good information on the process to follow when decommissioning apps/software/systems? I need something that aligns with ISO27001. Thanks, Brian. -
KPIs for ISO 27001
Hello, could you please inform what are the mandatory KPIs for ISO 27001? -
Supplier security
In our company, internet service provide with two Source which one of them is our interested party and other is ISP. Interested party is top level of our company that don’t have any SLA and contract about internet service.What’s your idea about this? -
ISO 27001 / ISO 22301 Implementation Project Plan
Would this (ISO 27001 / ISO 22301 Implementation Project Plan) guarantee ISO certification?