Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Certifications for ISO 27001 experts
Is there a specific global certification for experts? Allows expert people to work to help organizations obtain ISO 27001 certification. -
BCP and Measurement report templates
I have two question. I am looking into drafting this two documents: -
Information classification
I have a difficulty right now to understand how to classify Information with regard to documents. -
Control justification on SoA
I have additional question. Is “Justification for selection/non-selection” column mandatory or voluntary to use? -
Legal requirements
For the “control objective A.18 – Compliance with legal and contractual requirements” – does this need to include other legal requirements or is it just those relating to information security. For example should the legal register hold reference to the Companies Act and other Financial Regulations – as these are not specifically related to information security. -
Alcance ISO 27001
"Mi pregunta esta orientada a la iso 27001. Para poder certificarse debe participar toda la empresa o solo el area it?" -
Prospective questionnaires
I sometimes receive questionnaires from prospective customers to assess our level of security. -
Non permitted technology strategy
One fast question as I have to have a draft for a customer by Friday on the following and I’m curious where I should put this within the existing toolkits: -
ISMS scope on cloud environments
I am working in a company which delivers an iPaas located on Azure (Azure is already ISO 27001 certified). What is the difference between the ISMS scope for an iPaas and a SaaS? -
Cryptography controls
I do have another question as well. In Statement of Applicability template there is a following row: