Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
ISAE 3402 and ISO 27001
This is what I'm meet with in Denmark when I talk to some accountants about ISO 27001. -
ICT policies and controls
1 - What steps would you take in implementing ICT Policies? -
ISO 27001 Internal Audit for Human Resources
Hi There, I have been asked to conduct an internal audit for our HR department. I just wanted to see if there are certain clauses, I should pay particular attention to. I know I need to look through the SoA and look at all the applicable controls in place, but not sure about the clauses. Overall, the objective is to evaluate the operational management of security against the requirements defined in our policies and processes. Thanks in advance. -
ISO 27001 Certified ISMS Foundation (CISF) qualification
Can you tell me if the 27001 foundation course and exam equate to a qualification similar to ISO 27001 Certified ISMS Foundation (CISF) qualification? -
Becoming a BC consultant
I'm using your book to seek knowledge for a future BC resilience consultancy job. It's really helpful. -
Integrating management systems
On 12th March, 2018 ISO 45001 shall replace OHSAS 18001 Standard. ISO 45001 is framed as per the Annex SL - High Level Structure.Earlier ISO 9001 and ISO 14001 were also revised to ensure that they are as per Annex SL - High Level Structure. With these changes all the three standards which are part of "IMS" shall be in same structure. -
RTO for critical application
Is there an RTO for critical application? If yes, who defines this? -
Risk Assessment, Risk Treatment, and Data Protection Impact Assessment templates
As you might know by now our company XXXX is working towards ISO 27001 and GDPR compliance. -
Risk assessment information
We are bought ISO 27001 documents and I have some questions about (RISK ASSESSMENT AND RISK TREATMENT METHODOLOGY) document. I did not found information about it in video tutorials (Helpful Materials) : -
Scope definition
Hello, I would like to ask a question about the ISO 27001 scope. I work in an organisation with about 50 employees. Is it possible to narrow the scope only to the IT department? the IT department is separated from the other departments (IT is on the first floor, the other departments on the second floor).