ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Using risk assessment and treatment templates

    I have a question regarding the Risk Assessment and Treatment Documentation at the EU GDPR & ISO 27001 Integrated Documentation Toolkit; Do we have to create the following 3 documents Risk Assessment table, Risk Treatment Table and Risk assessment and treatment report as mentioned at the toolkit or we can use one sheet for the Assessment and treatment and reporting as the attached sheet?
  • Cloud security concerns

    I am currently working with a small client that hosts its production servers in the cloud.
  • Man-days needed for ISMS implementation

    Is there any calculation formula to estimate the man-days needed for ISMS implementation according to required information you provided in your questions?
  • Documented information control

    I need consultation in the procedures for the it department document code (11.A.12.1) ; here at XXXX we record the procedures step by step video recording not documenting the procedures in word or pdf formats ; is it acceptable as per the ISO 27001 standard to be in videos format though we are keeping tracks for changes and record that at master list ?
  • Filling template

    I have bought the ISO 27001 project / EU GDPR & ISO 27001 Integrated Documentation Toolkit / and I need support how to fill the "Appendix – List of Legal, Regulatory, Contractual and Other Requirements"
  • ISO 27001 and GDPR trainings

    I am responsible to the training and awareness of GDPR, office procedures and security within my organization. Can you tell me what content a new employee needs to know when they first start with us?
  • ISO 27001 and SOC

    I want to know ISO 27001 clauses or controls related to SOC(Security Operation Center). Or questions that can be asked in isms audit related to SOC.
  • Integrating management systems

    Do you have any information on how to integrate certain standards and carry out one audit on standards such as 27001, 22301, 20000, 10008 and 9001?
  • ISO 27001 Annex A controls

    I have a question regarding The Annex A controls within 27001. Do we have to implement all controls (I think total of 115)? For example, looking at the “checklist_of_mandatory_documentation_required_by_ISO_27001_2013.pdf” file within the toolkit, I can see that A.8.1.2 is not within the “Which documents and records are required?” section.
  • ISO 27001 implementation steps

    I am new to ISO 27001 and am just starting off on gaining ISO 27001 accreditation with my company. Our company is only small, with around 50 users.