1. Is it possible to have a typical example of a company that has implemented this standard to help us do it within our company? There is no example in the toolkit which does not facilitate understanding.
Risk Management Criteria
I’ve been following your work for a while and have a question about Risk Management Criteria, specifically around Likelihood.
Backup policy
For creating a backup policy, what are the points to be considered and also what will be the retention period for all the backup or what will be the compliance requirement for storing the backup and the storage period
Scope definition and project planning
1. Is it possible that all applicable controls in SoW are fully implemented already? If yes, what risk treatment plan will be?
ISO 27031 and ISO 27036
For the moment we are working on the documents but in particular we are realizing further potential needs related to the circumstance that an important part of our business processes involve the outsourcing of essential components and services, in form of a supply-chain to be incorporated into our scope.
Scope definition
I’m currently completing the ISMS Scope Document for ISO27001. For section 2.4 Networks and IT infrastructure, how detailed does the list have to be? For instance do I have to name each server included in the scope, if so the document will be several pages long as the company I work for is a global business or would it be sufficient to say 40 servers, 3 switches, 5 active directories etc.
ISO management system certification
1 - What is the current process for companies to become ISO27001 and ISO22301?
Risk Assessment
1. How to identify the probability of occurrence?
Business Continuity Plan Concept
Per the following statement on your website. I respectfully wish to point out an inconsistency in the verbiage as stated.
Competences for Business Continuity Manager
Could you please give me a short reply concerning the question which education would be the "right one" for a Business Continuity Manager of a Company following ISO 22301? Are there minimum requirements?