CEO's I have visited are worried that ISO Certification costs are higher than ever. Is there information that shows the cost avoidance - ISO certification can bring to the organization?
SOA content fields
Hi, I have a question about the Statement of Applicability, the document needs to follow the exact format that is suggested in the video? I mean it is mandatory to use the following fields, or it could have a different format?
Information Security control and revision over third parties
How do I practice Information Security control and revision over my third parties if they are let's say Microsoft(Office 365)?
SOA content
What I have to put in justification of selection and non selection and objective control in SOA?
ISO 27001 4 Context Of the Organization
Internal Audit after the ISMS release
How long Do I need to wait once the ISMS is released for start with the internal audit?
Mandatory documents and records
We purchased your 27001 Academy Premium Documentation Toolkit. I noticed that the included 27001 Academy toolkit lists 25 mandatory documents while the included IS&BCA Checklist of Mandatory Documents lists only 16. Which one should be used? Please let me know.
ISMS in a bank
I'm looking for best practice to implement isms in a bank. i don't know how to start. it is a big project and it must devide to some scopes. what need i do?
ISO 27001 Audit requirements
is it a requirement to have an external company to perform an iso audit? I didn't see it in the requirements or can a company perform an assessment on its own? audit* I mean
Risk assessment and risk treatment
1 - What is the next step? Is it to again talk to all risk owners and go through the Risk treatment plan in order to set deadlines/needed resources?