ISO 27001 & 22301 - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • System access by the security guard

    Just need one clarifications, can the system access be given to the security guards?
  • Structure for a project plan

    Would you please guide me how to make a structure and logical project plan for implementing ISO 27001:2013 ?
  • Existing controls decrease the level of risk

    I did the risk assessment and go the risk level for every asset. Then the current controls maturity were evaluated accordingly to the CMM levels. The risk scale is from 0 to 4 and the acceptance level is below 2. The controls recude the current risk to below 2 level, so there is not need for a risk treatment plan. This is correct? or I'm missing something?
  • Guide for Indicators and risk assessment

    Hello, my question is if ISO 27001 has a indicator guide with formula for assessment every domain or control in a organization ?
  • Estimating the price for risk assessment

    I am facing a difficulty in estimating the price for risk assessment to a client with 600 employees divided in 3 branches. They are primarily interested in checking the roles, responsibilities of their IT/security department, the processes and performing the asset based risk assessment. What are the criteria based on which you charge the clients? What should be the average price per user, price per computer, or how do you do it?
  • Business Continuity or Disaster Recovery?

    Which out of Business Continuity or Disaster Recovery is an absolute must have?
  • Certification that better suites a Health Maintenance Organization

    I will like to know the certification that better suites a Health Maintenance Organization (health insurance company)
  • Indicators and ISO 27001

    I want to know how to get the indicators for assessments of ISO 27001? I wonder if there are ways to carry out assessments and obtain diagnostic?
  • Examples of different types of assets

    I am worrying about Assets and that I include them all, do you have any information that gives me examples of the different types of assets (physical and information) and what assets come under those headings?
  • Differences between ISO 27017 and ISO 27018

    Can you please explain the difference between ISO 27017, ISO 27018 and the document controls and assurance in the cloud using COBIT 5.