What are the top questions the auditor can ask to the top of information security management ? 10 questions needed.
Customer-facing Acceptable User Policy
I’m looking for a customer-facing AUP (for cloud IaaS/SaaS) customers. I don’t see something like this in the kit. Am I mistaken in thinking this was in the kit?
Reports Date
The report Date must be the same of the last day of Internal audit period that the process took? I mean if I did the internal audit of a control was: from 12/12/18 to 19/12/18, the report date must be same day that it ends? like 19/12/18 or I can do it later and write the report in a different date like 18/01/19.
Scope template
I am in the process of creating my scope – are there any example ISO 27001 scopes I could have a look at?
Template content
Hello, for me, there are two possible interpretations of the term "outside" (out of).
Toolkit content
I do have a couple of questions for you regarding the documentation in the toolkit. Hopefully you want to answer these questions.
Becoming technical writer
Where do you apply as a technical writer for DR and BC (27K01 and 22301)? I have the experience as a systems engineer leading the technical group building the DR infrastructure and had written my own custom made BC plan with ISO 27K01 included. This time I want to focus on technical writing in BC and DR.
Lead Auditor certification renew
I did the auditor leader cert many years ago and at this time I would be interested in renewing this cert. Do I still have to take the workshops and the exam , or , is there another option for me as I'm interested in just renewing a cert I already took once?
Background check for suppliers
I am very new to Advisera and Conformio, so please bear with me. We purchased the ISO 27001 & the EU GDPR bundle. Prior to purchasing this, we had already put a significant effort towards a project for managing Supplier Relationships. With that known, on to my question….
Templates content
I had a question for you regarding the reference documents which are mentioned in the beginning of some of the ISO 27001 documents. Is it obligatory to mention these documents?