My question is about the Information Security Officer position in the company. Is it required to have such a position for ISO 27001 certification?
Risk management process
I have a question regarding the risk assessment process and the documents from the toolkit.
Documenting ISO 27001 and ISO 22301 documents
Hello, I have a question, I have read the list of documents in which are detailed which are mandatory in 27001 and which in 22301, in my case. We only carry out those that are obligatory but, I do not understand if I have to do them in duplicate for each one of the rules or if you only have to make a single document naming the two norms in the same or on the contrary you have to make a document for each one of the standards, specifying that it is the SGSO and of the SGCN. Can you confirm it please? Thank you.
BCM template content
I would like to clarify a few questions regarding the BCM template “22301_25999_En templates” which we bought:
Information classification policy
I need help on Information Security Classification Standard how can i do first draft and important materials.
Pre-certification audit
How does a pre-certification audit (gap-analysis) differ from stage1 audit?
Defining controls
Our company has a platform developer team and web designer. For the sake of information security, do we have to isolate their work space (physically) ? Like put them into a restricted accessible room?
Documenting roles and responsibilities
We have implemented ISO 9001:2015 ans 27001:2013 standard in our organisation. I have one doubt.
Risk Assessment Table template
We can not find an "impact" column in Risk Assessment Table.