Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
PII role identification
A small company using cloud services to store and process its customers data, without offering any cloud service, can be considered a PII processor or just a cloud service customer? -
Certification against ISO 27108
A PII processor, principal or controller can be certified against ISO 27018? -
Practical example of ISO 27018 PII processor, principal and controller
Is it possible to explain with an example who is PII processor, who is PII principal and who is PII controller? -
How ISO 27001 and ISO 27002 are related
I am seeking information as to how ISO 27001 and 27002 are related. In order to become ISO 27001 compliant would my organization need to meet every facet of the ISO 27002 Implementation Guidance for each control or is the Implementation Guidance just that; recommended guidelines that I will choose to use and/or implement based on the scope of my organization and/or specific threats/vulnerabilities? This may be a very broad question but we are seeking to become better aligned with ISO 27001 and eventually become ISO certified as an organization. I thank you in advance for your time and look forward to hearing from you. -
ISO 27001, CISA and COBIT
Why should I implement ISO 27001 rather than CISA or COBIT? -
ISO 27001 instead COBIT and COSO
Why do we select the ISO 27001 instead of COBIT, COSO etc? -
Development of the Information Security Policy
I am struggling to write a police for my department, I don't really know where i should start. -
Certify cloud computing environment
It would be great to provide insight on certify cloud computing environment. -
Obtain the management support
Are there any silver bullets which are guaranteed to gain attention, recognition and resources from C suite execs (apart from a breach!!) regarding Information Security? -
Comply with clause 9.1
I am struggling with this portion of the 27001 standard. I have setup and pulled together the goals and objectives for our organization but seem to keep hitting a wall when trying to identify how to meet this clause. Do you have any samples / examples that may be able to help me move this forward?