ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit ISO 9001 Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001/Risk Assessment Table ISO 9001:2015 ISO27001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

Information security standards
What are all sec standards related to ISO or where can I find this info?
ISMS implementer and auditor
Hi, I'm interested to do ISMS , I have exp 3.4 years in IT infrastructure. So I need some clarification how many years of exp needed to become isms then what courses want to do
Mapping between ISO 27001 and ISO 27002
I’m trying to help customers start at SANS 20CSC and take their rather direct recommendations into something similar in ISO2700x. There is a mapping in SANS to 27002 but that kind of leaves me with the question of the mapping of controls from and to 27001
ISO 27001 project
1 - What are the most important assets we should focus on, in the Risk Assessment Table?
Mapping from ISO28001 to ISO27002
I need to understand if the is a direct mapping from ISO28001 to ISO27002, and the Annex and controls in the two standards? Is so where do I find that information please?
Benefits of certified auditor
Based on your experience, what are the benefits (beside the mandatory requirements) of having an internal auditor certified on 27001 in a company? I am a security consultant working for third party customers and I would like to go for the certification of 27001 as an internal auditor first since I think:
ISO 27035 and incident management
ISO 27035 is about incident response, but given that part 3 (which covers operations) hasn’t been published yet, is there much useful overlap? Does part 2 overlap with any of ISO 27001, or is a company better off not worrying about 27035 for the moment?
Risk assessment in ISO 22301
In implementing ISO 22301, can one adopt the risk module in ISO 27001 and treat the 5 elements the same?
Incidents and Non conformities
1 - Couple of employee are sharing the passwords among them and we have Password policy in place. what will you raise against them ? security incident or non conformance ?
When and where did ISO 27001 start?
When was ISO27001 initially implemented? Was it started in Europe?