ISO 27001 & 22301 - Expert Advice Community

Cybersecurity

Explain why business continuity and ISO standards are important in the context of cyber security. Using examples in your explanation

Mandatory and nonmandatory documents.

1. I hope everything is well with you
I HAVE Aquestion about ISO27001 Implementation Tool kit does the toolkit contoin or cover all the documents that I will need to comply with ISO27001 BECAUSE I notice for example when I Review the document internal audit checklist regarding control A6 YOU Need evidence for the are all information security responsibilities clearly defined through one or several documents? For example and if that compliant or not my question here I MUST CONDUCT Document for the A.6.1.1 AND A6.1.2 AND A6.1.3 AND A6.1.4 THIS IS MY QUESTION

2. Also Iam confused regarding the document I Downloaded from ISO27001 Academy named checklist of mandatory documentation required by ISO27001 BECAUSE the document contain the part explain the non mandatory documents
And this part contain for example document about BYOD I CONFUSED BECAUSE THE DOCUMANTION TOOLKIT CONTAIN THE BYOD DOCUMENT WHICH IS RIGHT THE DOCUMANTION TOOLKIT OR THE DOCUMENTS WHICH I Downloaded from the ISO 27001 Academy
Please explain to me

ISO 27001:2022 Documentation Toolkit

The advisera document toolkit for ISO 27001, ISO 9001& ISO 14001 has been a great help to our organization. We have a partnership with Advisera..

The much-awaited ISO 27001:2022 is finally here. Just want to ask the following questions:-

1. Whether ISO 27001:2013 version documentation toolkit can used in the transition of ISO 27001:2022 version. If yes, How can it be done and If no, please provide the reason also?

2. When will be Advisera ISO 27001:2022 documentation toolkit will be available? Any timelines for that

3. Can u please provide the quotes for Advisera ISO 27001:2022 Documentation toolkit?

ISO 27001:2022 Documentation Toolkit

Dear All,

Trust all is well

The advisera document toolkit for ISO 27001, ISO 9001& ISO 14001 has been a great help to our organization. We have a partnership with Advisera..

The much-awaited ISO 27001:2022 is finally here. Just want to ask the following questions:-

1. Whether ISO 27001:2013 version documentation toolkit can used in the transition of ISO 27001:2022 version. If yes, How can it be done and If no, please provide the reason also?
2. When will be Advisera ISO 27001:2022 documentation toolkit will be available? Any timelines for that
3. Can u please provide the quotes for Advisera ISO 27001:2022 Documentation toolkit?

Looking forward to hearing from you

Query Related to ISO 27001

Dear All, 

Trust all is well

There is one client which is just a startup,  who is providing IT enabled solutions and services and want to get ISO 27001 certification. But all their Infrastructure, security and IT development and services is provided and managed by a third party which ISO 27001 certified. Only sales marketing is done by the client.

Whether client should go for ISO 27001 certfication or not, even when there is only few employees and company is not yet operational 

Looking foward to hear from you 

ISO 27001:2013 Certification

First of all, I would like to congratulate you for your beautiful work, I follow you on your channels and we are partners with Advisera here in Brazil.

We are preparing for ISO 27001:2013 Certification, I would like to ask you a question, so that we can be successful in our certification, I need to focus on the mandatory documents and registration, these are the main requirements, and apply the controls that I use I need Annex A in view of my context and established scope, which are validated in my declaration of applicability.

my doubt is whether the way we are conducting the implementation process as mentioned i is correct! a big hug!

A.8.11 Data Masking

In the new ISO 27001 control for A.8.11 Data Masking.  It is a good practice or a requirement to mask the PII in the internal system despite the role-based access is implemented?

Also, how will it balance with the business day to day operation?

Sample document

We have recently completed a sample document; however, is there a document equivalent to create within Conformio that may have a different style or format?

ISO 27001 - Enquiry

Can you confirm if during stage 1 of a certification process, does an organisation certified Lead Implementer or Auditors within the organisation before the organisation is certified and which clause demands this.

Secondly, can an organisation outsource the roles of ISO 27001 LA and LI and be successfully certified?

I will be grateful to have your feedback.

Free ISO 27001:2013 to 2022 Conversion Tool – find out what has changed

Hello Dejan,

Your Tool do highlight what are the features or points as bullets been changed from prev version to what it is now or been highlighted ?

Are you sure 2013 do have info sec version made avl post which you made the changes to upgrade to 2022...

Have you complete the GA