ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Best practice for BC Plans

    Can you recommend a good site, book, etc as to best practice for BC Plans?
  • How to develop and implement DR Plan

    How to develop and implement DR Plan for my organisation?
  • ISO 22313 and BCMS implementation

    95/5000 Where does the ISO 22313 guide for the adoption of ISO 22301 support me? How much value does it give me?
  • Developing BCP tests

    A tabletop test seems a little too sterile and would not necessarily expose embedded organic issues. What would your version of the Kobayashi maru test be?
  • Topics for auditing a datacenter

    What factors need to be considered or rather what should be done if we are to audit a datacenter?
  • Intellectual property rights

    1) Intellectuele eigendomsrechten (Dutch translation of Intellectual property rights) is the law that we have in Belgium. In this case there are two things that I'm thinking of:
  • Policies levels

    I am still working through the questionnaire, just finishing a few areas off. Would you be able to tell me if I need two information security policies? I am reading the standard and it says a higher level and lower level.
  • Validity of a LA certificate

    My ISO 27001:2013 LA certificate has expired. I wanted to know does IRCA approved LA have expiry ? Also ISO standards are changed every 5 years. Shall I go for LA course now or wait for standard to change ?
  • A.13 security controls from ISO 27001 Annex A

    Can you tell me the difference between these 3 sections: A.13.1 - Network security management, A.13.1.1 - Network controls, and A.13.1.2 - Security of network services?
  • How to fill in "Requirement" column

    'Requirement' does not sound very clear to me, what do we have to put in this column?