Qualitative and quantitative risk assessment methodologies
Survey to interested parties
Unique Risk Management Framework for ISO 27001, ISO 22301 and ISO 9001
Setting Active Directory
IRCA or RABQSA
Costs of the implementation
Updating existing information security policies
I am trying to update and simplify 9 Info security policies to align better with ISO 27001. How do you advise I go about this. There may be some duplication with control groups. Should I follow your template?