ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • BCP and ISO 27031 standard

    I have started the project mentioned in my previous messages to you. As background it is a very large organisation (provincial government with 30,000 it users. I have to do a BCP for IT department and look at and review BCP’s for the 13 other departments in the organisation.
  • Document control procedure

    1 - Yesterday our company bought your documentation package for ISO27001. At the moment I'm dealing with the first document: the document control procedure. Can you tell me what the reference documents are for? How do I know / can figure out it's a reference document to this specific document?
  • Communication plans requirements

    Is a communication plan required to be maintained for every process and team?
  • ISO certification for universities

    I work for a university. We are running engineering courses, for that reason we have engineering workshops and labs, eg. civil, mechanical, electronics & electrical. I would like to know if any ISO certification pertain to workshops/ labs in university setup?
  • Implementing private cloud

    Our Holding is planning operate as IAS, PAS, SAS model (Private Cloud) for our Business Unites (Sub Organizations). Currently we have Traditional IT Organization model.
  • Asset owner identification

    I'm sending some questions regarding ISO 27001 template.
  • BCM training material

    this is the first time I would be implementing BCMS so I am reading it from that perspective. Are there any tips or some BCMS related free training videos on your website like you have for ISO 27001?
  • Vulnerabilities understanding

    Can vulnerabilities always be viewed as the lack of respective controls? what is your opinion?
  • Asset owner

    I'm sending some questions regarding ISO 27001 template.
  • Writing ISO 27001 documentation

    I have roughly 5 departments. Should I give each department manager the full mandatory documents to fill out? For example, for the first mandatory document, the scope. Should I have a scope for each department or should I have one written by me (project manager), which includes all the departments? Does each department need to write the documents or one for the whole company? If you need more elaboration please feel free to ask. I am still in the beginning of the implementation process so at this point there is still confusion. Please help in clearing things up. Any information on the first steps of the process will be much appreciated.