ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Documented information control

    I need consultation in the procedures for the it department document code (11.A.12.1) ; here at XXXX we record the procedures step by step video recording not documenting the procedures in word or pdf formats ; is it acceptable as per the ISO 27001 standard to be in videos format though we are keeping tracks for changes and record that at master list ?
  • Filling template

    I have bought the ISO 27001 project / EU GDPR & ISO 27001 Integrated Documentation Toolkit / and I need support how to fill the "Appendix – List of Legal, Regulatory, Contractual and Other Requirements"
  • ISO 27001 and GDPR trainings

    I am responsible to the training and awareness of GDPR, office procedures and security within my organization. Can you tell me what content a new employee needs to know when they first start with us?
  • ISO 27001 and SOC

    I want to know ISO 27001 clauses or controls related to SOC(Security Operation Center). Or questions that can be asked in isms audit related to SOC.
  • Integrating management systems

    Do you have any information on how to integrate certain standards and carry out one audit on standards such as 27001, 22301, 20000, 10008 and 9001?
  • ISO 27001 Annex A controls

    I have a question regarding The Annex A controls within 27001. Do we have to implement all controls (I think total of 115)? For example, looking at the “checklist_of_mandatory_documentation_required_by_ISO_27001_2013.pdf” file within the toolkit, I can see that A.8.1.2 is not within the “Which documents and records are required?” section.
  • ISO 27001 implementation steps

    I am new to ISO 27001 and am just starting off on gaining ISO 27001 accreditation with my company. Our company is only small, with around 50 users.
  • Application of BCP on ISO 27001

    If there is no commitment to contracts for customers on providing resiliency, and risk is acceptable not to have a BCP... will ISO 27001 still be looking at a information security continuity in BCP plan ( Not BCP plan, so no information continuity)?
  • Certificaton audit

    After completing an internal audit how would my company get an external audit / 3rd party certification?
  • Legal requirements

    We have purchased the toolkit already, but I have a question about an article: https://advisera.com/27001academy/knowledgebase/laws-regulations-information-security-business-continuity/