For the secure development Policy, in section four of your template you mention testing plans. What should be included in this document? Also, is this a mandatory document that should be created along with the secure development Policy?
Risk acceptance criteria
Should all risk be evaluated with a risk acceptance criteria or evaluated with multiple criteria for every asset group?
ISAE 3402 and ISO 27001
This is what I'm meet with in Denmark when I talk to some accountants about ISO 27001.
ICT policies and controls
1 - What steps would you take in implementing ICT Policies?
ISO 27001 Internal Audit for Human Resources
Hi There,
I have been asked to conduct an internal audit for our HR department. I just wanted to see if there are certain clauses, I should pay particular attention to. I know I need to look through the SoA and look at all the applicable controls in place, but not sure about the clauses.
Overall, the objective is to evaluate the operational management of security against the requirements defined in our policies and processes.
Thanks in advance.
ISO 27001 Certified ISMS Foundation (CISF) qualification
Can you tell me if the 27001 foundation course and exam equate to a qualification similar to ISO 27001 Certified ISMS Foundation (CISF) qualification?
Becoming a BC consultant
I'm using your book to seek knowledge for a future BC resilience consultancy job. It's really helpful.
Integrating management systems
On 12th March, 2018 ISO 45001 shall replace OHSAS 18001 Standard. ISO 45001 is framed as per the Annex SL - High Level Structure.Earlier ISO 9001 and ISO 14001 were also revised to ensure that they are as per Annex SL - High Level Structure. With these changes all the three standards which are part of "IMS" shall be in same structure.
RTO for critical application
Is there an RTO for critical application? If yes, who defines this?
Risk Assessment, Risk Treatment, and Data Protection Impact Assessment templates
As you might know by now our company XXXX is working towards ISO 27001 and GDPR compliance.