Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
A.7.2.3 Disciplinary process
I wonder if you have or show some documentation to help us meet the requirement A.7.2.3 Disciplinary proceedings of Annex A of standard ISO IEC 27001. -
QMS and ISMS
1. Internal Quality Audit. Is it mandatory that only software professional should be trained as Auditor? -
Conocer aspectos de auditoría y metodologías
Conocer aspectos de auditoria, metodologías etc? -
Security organizations and security roles
We are building ISMS based on ISO27001 standard. From ISO27001 point of view, Security Organization needs to be built. -
Combining Quality Policy and Information Security Policy
What is the best practice, maintaining a separate Quality and Information Security Policy, or combining them for a company with both management systems? -
The term "Contractors"
I just wanted to double check the term contractors as far as ISO is concerned. Does it mean anyone employed by us and any 3rd party doing work on our behalf? Our HR team are looking at their arrangements and wanted some clarification. -
ISMS scope question
As a software development company, our most important asset to protect is all customer information that flows through our networks, and that of our employees & subcontractors (who are all telecommuters). I am trying to decipher what precisely I include as part of my scope..for instance, I cannot control the security of the GoDaddy email services that we use, but I will include an "Email Policy" for all employees and subcontractors to ensure that sensitive data sent via email is properly handled. Because I plan on writing an email policy, would "email" be considered in scope"? -
Implementing business continuity management system
what are the process involved in implementing business continuity management system? how we audit the business continuity management system and what are process involved in auditing business continuity management system.? -
Creating policies and procedures: Stage of implementation
In which stage of implementation do we start creating policy and procedure. What is the most important security policies and would be created first i.e. sequence. -
Monitoring and measurement results
How does the toolkit handle documenting the Monitoring and measurement results (clause 9.1) requirement. I see in each document and in the SOA references to measuring, but how are these measurements formally documented?