1 - Gostaria de saber melhor sobre os elementos procedimentos de controle de documentos, as ações corretivas e preventivas e a auditoria interna. Como especificamente colocarei isso na documentação da empresa que estagio? Além dos procedimentos de controle de documentos, as ações corretivas e preventivas e a auditoria interna, papéis e responsabilidades dos funcionários, fornecedores e terceiros, termos e condições de contratação, procedimentos de operação das instalações de processamento de informação.
ISMS implementation strategies
1 - I am thinking of assisting a friend of mine (providing consulting) in implementing ISMS.
Audit checklist
I am writing up a checklist for internal audit but got stuck wondering if we're supposed to audit the implementation of the standard or the implementation of our internal ruleset (policies/standards/instruction/etc)?
Management principles
What are Management principles of an ISMS?
Auditing ISO 27001 and ISO 27018
I work for a small company in Serbia, we are actually on our way of our ISMS implementation base on ISO 27001 and also on our way to be GDPR ready.
ISO 27001 competencies
1- Hi, we have included all our employees in the scope for ISO 27001. Do we have to a competency matrix for all of them as per Clause 7.2 ? Or only for the ones with the Information Security role who have been assigned the responsibilty for ISMS ? Please clarify for who all the competency matrix is to be done ?
Opposition to implementation
I would like to ask what opposition of management and stake holders might resist to the implementation of ISMS.
ISO 22301 questionnaires
I need resources on ISO22301, kindly advise a typical questionnaire I can administer on a Bank client to extract the required information (project scope) regarding the audit and certification towards achieving ISO22301.
ISO 22301 implementation
My organization is planning to implement ISO 22301 the following semester and we want to know what are the recommendations to implement this standard in a financial organization.
Use of cryptographic controls
Can you please elaborate what kind of controls addressing under 10.1.1, as we as an organization just implemented the SSL certificate for securing our web interfaces acessed by external or remote users, in this regard can 10.1.1 caluse will be applicabe or not, in case it applicate so what kind the policy we have to draft at our side.