When creating policies for ISO 27001 does a Company Director need to sign these or can any Director sign them?
Cursos en México
Me encuentro en el país de méxico, sabe si BCI o DRII ofrece la certificación en mi país? Esto lo pregunto porque existen consultorías en mi país que imparten cursos de líder implementador en ISO 22301 ó lider auditor.
Pasos para implementar ISO 27001
¿Cuáles son los pasos globales para poder implementar la norma ISO-27001 en una organización de mediana envergadura, tomándose como tema de tesis?
Internal audit
1 - In regards to the internal audit, it should be done right after training and awareness, correct?
Benefits of ISO 27001
Hi! Can you help me on what is the benefits of ISO 27001 to the organization. As of now i'm doing a proposal for are organization on what is the benefits of being ISO certified. We would like to convince then and courage then to pursue the certification for entire organization.
thanks
Performing risk assessment
So as I go through the risk treatment, I notice that most of the risks are less than a 3 therefore are accepted risks...However, that is because I already have a control in place or the likelihood is a 0...can I put "risk acceptance" in the risk treatment for "selection of options" and then put the control that is in place or that we will implement in "means of implementation"?
Root cause for identified non-conformities
Just wanted to know about what someone needs to provide as root cause for the identified non conformities And mainly corrective action details.
Standard in selection of partnership
Hello, I am performing research for a mortgage back office provider partnership opportunity. I would like to know if there are more than just the ISO 9001 for our line work or should we consider other certs?
Vendor Management Policy
I can't seem to find a Vendor Management Policy in the ISO 27001 Documentation Toolkit. Am I just missing it? Or, is there simply no such policy in the Toolkit?
BCP
hay algún ente (por ejemplo ISACA) que conste que X persona es apta para aplicar la metodología BCP de la ISO