Why aren't similar controls to Annex A included in other standards, i.e. 22301? Why specifically does 27001 have a set of controls attached?
SoA and Risk Treatment Plan
Regarding the mandatory documents required for ISO27001, does the statement of applicability constitute the risk treatment plan or is the risk treatment plan a completely separate document?
Information security on project management
I'm looking for more information or tools for ISO 27001 A.6.1.5,, if you know more about clause A.6.1.5 or product
Certificates for Asia Pacific and EU regions
I'm planning to expand my cloud and data center business to different countries and would like to work with the Government, banking and financial institutions. could you please help me with the list of compliance certificates pertaining to data and cloud business needed to foray into asia pacific and EU region
BCM Templates vs BCM Software
What are the pros and cons of the two options (BCM Templates vs BCM Software)?
ISO 27001 certified organization in EU
I need some information about how many organizations in EU are certified to ISO 27001 standard, so I was wondering if you could help me with this information? Or if you could tell me where I can find this information? Or some information about organizations before and after the ISO 27001 implementation? It would help me a lot for my paper statistics.
Elaborating an asset inventory
I need a little help on defining our asset register. I have had a meeting with my colleagues and we have a few questions. I hope you can help of point me at someone you can.
Standard for safety in university workshops and lab
Do we have any certification option available for safety in university workshops and lab.
Filling a SoA document
I am completing the SoA and wonder if I do need to complete for each objective and control, the ‘responsibility coloum’ or can this be left blank?
Document control procedure template
At the moment I'm dealing with the document 00. Right now I'm at point 3.3.1 and 3.3.2. Why does just point 3.3.1 talks about printed documents and point 3.3.2 not. You could have a printed version of a document with a higher confidentiality level too, right?