Do you have any case studies and quizzes or simulations so that I can teach and make my students to practice ?
The Risk Treatment Plan and the Implementation Plan
Section 10. It says “Implementation plan” but the document states “Risk Treatment plan”. Risk seems to be under section 7. Please explain
Working out the RTO and RPO
I’ve completed the Business Impact Analysis questionnaires and I need to work out the RTO and RPO. Do I need to work out the RTO and RPO per application and database for each activity (department)?
Asset inventory and risk calculation
Do you have anything about how I can to do asset inventory and calculate the risk ?
SoA alteration
For the first time we need to include Outsourced Development in our Statement of Application, meaning our SoA version changes. How does this impact certification? We wouldn't be due an external audit until August 2019 Many thanks.
Classification of assets
Can you clarify me the classification of assets when it comes to ISO 20001?
Arguments for control adoption
I'm considering buying the Password Policy but I'd like to know if it can help me before I buy it!
Missing documents from the toolkit
In the ISO 27001:2013 are two chapters included:
Costs and time for certification
What is the cost for an advisory to certify a technology services company and how long does the process take?
Approaching management
I am working in an organization where management loves to feel and say we are start up and for everything, and hence those things will not work. I do agree with your statement that the management commitment looks obvious but it really is not and without which in my organization everything is considered as escalation. There is no right approach, they pick the control matrix and start working on the security aspects and hence the friction and internal threats have increased so much that it is becoming difficult day by day to work on it. And when I ask my superboss about it, he says this is how we work. I need your advice on this so that I can work better. I don't want to give up nor fail in any case.