Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Personas para implementar ISO 27001
He recibido la siguiente pregunta: "La compañia en la que trabajo actualmente tiene alrededor de 150 usuarios con equipos de computo y smartphone asignados por parte de la empresa, ademas de esto tenemos alrededor de 300 personas solo con un equipo smartphone para acceder a una plataforma web, mi pregunta es si solo una persona puede realizar de manera exitosa todo el procedimiento para llegar al ISO. y cual seria su consejo para los primeros pasos a seguir." Respuesta: Una persona podría desarrollar/manter la documentación necesaria para el proyecto, pero necesitas obtener el apoyo de la alta dirección de la organización para la implementación/certificación. Además, todas las personas implicadas en el alcance del SGSI tienen que seguir los procedimientos y políticas definidas para el SGSI. Si necesitas más información sobre los pasos a seguir para el proyecto, por favor, mira este artículo: https://advisera.com/27001academy/knowledgebase/iso-27001-implementation-checklist/ También te recomiendo nuestro libro "Seguro y Simple" : https://advisera.com/books/seguro-simple-una-guia-para-la-pequena-empresa-para-la-implementacion-de-la-iso-27001-con-medios-propios/ -
Lead Auditor career
I have passed ISO 27001:2013 LA course. Would like to pursue my career as ISO 27001:2013 LA. Could you please help me with further process of how to get it done. Also awarded certificate is valid for 3 years , how do i extend the validity. -
Cybersecurity Framework or ISO 27001
Thank you for your videos on IT security. I work for an institution with about 500 employees where most of these IT security systems and standards are not in place or documented. I have been appointed to lead the ICT security department and I'm now conflicted on whether to start with a Cybersecurity Framework or ISO 27001. From my research these are both important please advise how I can get started -
Risk management in projects
I have in mind that our customer service managers/project managers do a small risk assessment per new project. -
Question about course
Module 2 ISO27k1 Determining the ISMS Cl 4.3, Which of the following statements describes an ISMS Scope, why answer 3? Offices London & Edinburough? any significance to those locations? -
Requirements for additional certifications
Why do we need ISAE 3402 when organizations already have 27001 certification INCLUDING GDPR!? -
Templates available
Are there templates for all the documentation as well as the final report we must provide the client? -
Becoming an ISO 27001 expert
I need some guidance from you as you are expert in InfoSec area. -
Business continuity on ISO 27001 implementation
I was wondering if I need to include business continuity if I am only doing ISO 27001 and not ISO 22301? -
Implementing ISO 27001
I'm struggling to know where to begin. There are so many documents - even the required only. Each has callouts to other documents. I'm not sure where to begin ... and when I am filling in the information, I feel like I'm making it up on the fly.