Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
ISO 27001 trainings
Before implementing the ISO 27001 security standard in my company I thought of being doing both the ISO 27001 examinations [ certification and the Auditor exam] prior to that. To become a skilled person in Security standard and get a deep awareness before the deployment or the implementation. So could you please brief me to how to do the exams, or the what required to do for completing the ISO 27001 certification and the Auditor both the exams. -
Implementing ISO 27001 with Documentation toolkit
A firm is requesting ISO 27001 certification. As a consultant candidate to join the project team, I must provide the requirements for the certification. Based on that the client will define my job role in the contract (Client has almost none IT technical knowledge). Under this scenario, please confirm if the documentation provided (as consultant for clients) will help me to get the ISO 27001 certification in Japan. Does it require translation? -
Documents and records
Can you please let me know how to differentiate between document and record in the subject. Documents are Scope, Information Security policy, risk assessment and so on. Records are training, monitoring and measurement, internal audit. Am i right? -
Toolkit content
I was going through the Annex A. I see that the following are missing: -
ISO 27001 Presentation to Top Management
Do you have presentation for top management to illustrate the benefits and importance of ISMS to organization ? -
CISM and ISACA
I would like to inquire if you have something specific for CISM -ISACA? e.g materials , Q&A samples….etc. thanks much indeed and really appreciated -
Integrating ISO management systems
how integrate iso27001 with other system , 9001:2015,14001,18001. -
Methodology for calculating risk
I have purchased the ISO 27001/ISO 22301 Risk Assessment Toolkit yesterday. I am keen to know regarding the calculations related to the RISK assessments especially the methodology which is being used. Any additional information related to this would be useful. -
Information security in project management
I just wondered whether you have a template for control 6.1.5 (Information Security in Project Management)? I am struggling with how to write it. Kindly provide me with some indicators in the absence of a template on what to include. I am assuming that it will impact the entire project management cycle. The issue is that we have there different entry points for new projects and ten there are some rare occasions where some projects are run by branch offices without an approval from a central body. How would you recommend going about writing the control in this case? -
Organizational context and Risk Assessment Report
1 - Do I need to prepare some reports when risk assessment and risk treatment are done? I am asking because in your template “Risk assessment and risk treatment report” there is one sentence under “Time period” there is a sentence saying:"Risk assessment was implemented in the period from xxxxxxxxxx to xxxxxxxxx. Risk treatment was implemented from xxxxxxxxx to xxxxxxx. Final reports were prepared during xxxxxxxx to xxxxxxx."