Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Who will write Business Continuity Plan
HI , I am implementing ISO 22301 in my organization and have some business units in scope which are business critical. Now comes the time to write the BC plan for those units. I want to understand who will write them and what is my part in writing those plans. My role is BC manager/implementer. Please advice -
Handling risk
What is your view on the handling of raw risk vs treated risk vs mitigated risk when it comes to residual risk and understanding your organisation's appetite for risk? -
NIST 800-171, Aerospace standards, CIS 20, NIST 800-53 with ISO 27001 Standards
How to drive NIST 800-171, Aerospace standards, CIS 20, NIST 800-53 with ISO 27001 Standards? -
Performing Gap Analysis
What is the best practice to perform the Gap Analysis and further steps to reduce the gaps? The steps and process to follow. -
Recovering an ISMS implementation
How to survive to a bad ISO 27001 implementation or convince management to have security practices without a regulation that impose ISO 27001? -
Risk assessment monitoring
How to monitor risk assessment and fix it? -
Risk Assessment with examples
Can you show as example of RA with 20 examples ? -
ISO 27001 Risk Monitoring
Hi I have implemented ISO 27001 and now I have to perform Risk monitoring for my documented risks.What I am currently doing is I review risk assessment sheet every month and see how many risk are mitigated and see how many risk have changed from "High" to "Medium" or "Low" and also how many from "Medium " to "Low" Once this is done I save the sheet as a new version number with the date of review. My question is , Am I doing the monitoring in correct way? Is there any other way by which I can monitor the risk without the hassle of versioning Please advice Thanks -
Implementation costs
How much does certification for ISO 27001 cost? I see here: https://www.pivotpointsecurity.com/blog/iso-27001-cost-estimate-48000-information-security-confidence-priceless/ that it costs $48,000 in total. is this correct? -
Approval for the residual risk
1. Can you advise me the best way to go about seeking the risk owners approval for the residual risk?