ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Expert

Rhand Leal

4151
Discussions
Expert

Carlos Pereira da Cruz

1915
Discussions
Expert

Dejan Kosutic

365
Discussions

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment ISO 9001 Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001 Internal Auditor Course Product: EU GDPR Documentation Toolkit
Select
CREATE NEW TOPIC +
Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • Controls identification

    Is this mandatory to include control numbers in Risk Assessment as a part of Implementation of ISO 27001?

  • Control A14.1.1

    I am working on this control and it refers to the Security Requirement Specification – I can only find the template Appendix_Specification_of_Information_System_Requirements_EN.docx.

  • Documentation examples

    I wonder if you have some exemple of complete document regarding to SGSI. I am more than happy if you could share it with me.

  • Defining scope

    My company will start the certification process, but we do not know how to define the scope. Currently we are a Telecom company, and we provide Data Center solution (hosting, colocation and cloud) for our clients. We are in search of market repositioning, but we do not know which scope to limit to be able to stand out to us.

  • Planning information security continuity

    I am working through the ISO templates we purchased. In regards to this control (Planning information security continuity), I don’t understand what it means. Do you have any examples or more guidance on what we are to do here?

  • Maintenance of records

    We received this question:
    Recorded Sessions from CCTVs, how long are they required to be kept for? How far back are they to be backed up for ISO 27001, ISO 22301 and PCI all respectively please?

  • Information security resources

    I am from network security background, and willing move on Info Sec. Could you please suggest me some materials or websites where to start from.

  • ISO 27001 versions

    I am preparing for the interview and one questions that comes in my mind.

  • Knowledge and certifications for the Information security Officer

    Just wanted to know what kind of knowledge and certifications do I need be able to fulfill a role as Information security Officer?

  • Audit and certification

    Who will do the audit and certification? Once we prepare the documentation and implement all that is needed, which organization will do the audits and the random audits during the 3 years? Will this be an outside appointed body or some individual qualified 27001 auditor who can do the audit?
Page 310 of 544 pages