ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Control of documents

    We are a small datacentre operating in XXXXX and we are in the process of implementing ISO27001. The business has grown from a small family company and thus lacks a lot of documentation (which is mainly in my head!).
  • ISO 27001 certifications

    1) It is worth getting certified? Is there any better certification to obtain?
  • Management review

    I am currently managing an ISO22301 certification project and I’m finding your manual ‘Becoming Resilient’ very useful.
  • Auditor profile

    I would like to know whether we can change our profile from information security auditor to quality management auditor. Is there any similarly between these two( ISO 27001 & ISO 9000) standards? If we can transition then how do we do it?
  • ISMS internal and external parties

    What is the difference with internal and external party in ISMS?
  • Audit template content

    1- In the ISO 27001/22301 Internal Audit Checklist https://advisera.com/27001academy/documentation/internal-audit-checklist/ , I can't see anything going deeper than 4.2 (not for example 4.2.1, 4.2,2...) - why doesn't it go into more detail, and how does it affect the implementation?
  • Acquiring auditor experience

    My worry is to get the first step into ISO27001 Auditing job as you clearly stated that people do a through research before they hire an auditor. The only pathway is to get experience first and have a bit of hands on jobs that will enhance your experience and the prospect of landing a new job. From your experience what's the best option to get experience in this field Dejan. I will take the exam next month as I am really passionate about ISO27001 and looking forward to be an auditor.
  • BCMS scope

    I am an Information Security Officer in a retail industry company with hypermarkets and malls in XXXX. My company is in retail industry and our core business is providing and selling goods to our customers in these hypermarkets through Point of Sales terminals. We are also doing online E-Commerce through our website.
  • Information Transfer Procedure

    I recently bought the 27001 documentation package from you and i found it really useful for myself and my organization.
  • ISO 27018

    Our company provides cloud services as SaaS and uses Amazon infrastructure. I would like to ask you if ISO 27018 standard is applicable for us or not? How to determine that?