ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Lead auditor and lead implementer courses

    I am a cyber security consultant and as part of education, i am looking at ISO27001 and was kind of confused if i should do the Lead Implementer or the Lead Auditor course…
  • Approaches beyond asset-based for risk assessment

    In working through the ISO 27001 toolkit, I saw that the tutorials and templates recommend taking an asset-based approach to risk assessment. While this may be the method that we use, I want to explore other options before settling on one in particular. Do you have any templates or documents available for a scenario-based approach or any other approaches?
  • SoA content_

    May I ask to which extent should be a Share risk situation detailed in SoA?
  • Template content

    1. I have just started work with the Risk Assessment Table template. Is it possible to change the colour range in the Risk column? Would like to have 0=green, 1=yellow, 2=orange and 3 and 4 =red. 3 and is red, but there is no colour scaling on 0,1 and 2...
    2. I did have a look at the post in Expert Advice Community – could you also describe how to change the colour scaling, please
  • ISMS and QMS

    It was advised that we need to implement QMS, as identifying and documenting all the process as this is the best approach. I actually did not quite comfortable, since it will increase the workload (thus require additional resource).
  • NIST CSF, ISO 27002 and PCI

    Can you be tell me difference and similarity between Nist csf and iso 27002 and pci dad?
  • SOA content

    The company I am working for has decided to implement ISO 27001 for a division only, a Division building up an iPaaS. I have a question related to SOA.
  • Distance of recovery site

    Is in ISO 22301 mentioned any specific kilometer distance between the fail-over data centers ? I Know that the selection of DC location/provider is a complex thing and many things are to be considered, but the people (mangers) are kind of discussing all over again a Number X or Y. If there would be some concrete number in ISO 22301 (or PCI-DSS or another ISO/??? market/industry relevant/authoritative document, the discussion could be over). Please advice.
  • BCMS presentation to top management

    I would like to know you, if you have an awareness presentation customized for a top management, which illustrate the importance of the BCMS for the business, in order to ease their buy-in.
  • Toolkit content

    1 - Document: Project plan