In disaster recovery, ss it using ISO 27031 or ISO 22301?What is it the difference?
Risk assessment example for agile approaches
Do you have an example of agile approach in risk assessment and risk tractability? Effectiveness of risk treatment system.
ISO 27001 and COBIT 5 relation
How is ISO 27001 related/aligned with COBIT 5?
ISO 27001 implementation
How to implement ISO 27001 from scratch step by step?
Control performance evaluation
In the risk register of a company they have put 'sufficiency of controls' and concluded that there is no risk and closed all the risk issues. How to ensure that controls are sufficient, particularly when the audit time is limited? Also how to identify the most important control which will ensure 'sufficiency'?
ISO 27001 and NIST RMF
Are ISO 27001's Risk Management process and NIST's RMF (Risk Management Framework) similar?
Risk calculation
We are getting closer to performing a Risk Assessment, my question to you is what is the best practice to calculate the level of risk. Should likelihood and consequence be added or multiplied?
ISMS implementation
1 - I wan to implement isms can you give an example of implementation of isms?
Disaster recovery and ISO standards
For Geographical Disaster Recovery What ISOs i need? and I would like having an example step by step for from RPO/RTO to success Disaster Recovery Plan to show what is the benefit for implementations ISOs for the company.
ISMS gap analysis
Can you share to me a questionnaire tool/file that helps us to examine the current status of ISMS and track the controls, which one is applied and which one is not?