In regards to implementing ISO 27001 with an existing quality management system, I am looking for information on how to blend the ISMS documentation with existing QA documentation, such as existing procedures, instructions, templates, etc. These types of documents are changed regularly, so there is a concern that this could lead to inconsistencies in the documentation.
ISO certification
1. My company needs to become ISO certified. If I complete the Lead Auditor course can I submit the paperwork to become ISO certified to the certifying body?As an internal auditor is that permissible?
Certified providers
1. Is Google GSuite hosted on Cloud ISO 27001 compliant?
The structure for contracts and regulations
1 - Appendix 2 List of wet regulations contractual and other obligations
Referential documents
I have a question about the referential document: policy for business continuity. The tutorial said there will be a high percentage to keep this document as a referential document inside the Policy. Beside the strategy for business continuity isn’t necessary if we don’t want to become compliant with ISO 22301. Can we ignore both documents (the business continuity strategy and the policy for business continuity) if we don't want to become compliant with ISO 22301?
Audit checklist
I need to know what are the controls to map with clauses and second point I need to know what proof can be shown for implementation of each clause?
Documenting BCP plans
I need your urgent help. I am very close to finish BIA with different SME’s and now going to start Business Continuity Plan(s) development.
Use of Toolkit's documents
I am wondering if I can use one document for both standard? As an example, for the project plan, can I use one project plan and integrate information about the SMSI and SMCA into it. Or, do I need to make two project plan document, one for the SMSI implementation and one for the SMCA?
Integrated implementation
1 - I have a few questions regarding the planning phase of implementing ISO 27001. I was wondering if you have any suggestions on how to integrate the ISO 27001 standard with an existing quality management system? Do you have any examples of how this has been done before?
Lead Auditor course and ISMS certification
Does this certificate then allow me to certify businesses as ISO 27001 compliant? How does this stage work for the Australian market?