ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 ISO 9001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS register of requirements Internal Audit Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Certification ISO 14001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

ISO 27001 training vs awareness
Ive a question concerning the clause 5.1.1 - more specifically, about the Information security awareness, education and training. This can, I realise, be specific to an organisation, however, my concern refers to the training aspect vs. awareness and education. We have been giving awareness and eduction sessions, but the training aspect i believe is something more in-depth. Does this mean establishing more physical awareness e.g. mock phishing attacks, leaving USB sticks (etc etc) around the office to see who picks it up and who plugs it in etc?
ISO 27001 or ISO 27018?
I have been working very extensively on the marketing of the ISO27K and the advantages it can offer to businesses in Australia.
ISO 27001 Lead Implementer
PBX system, it can be an asset?
Changes in the asset inventory
ISMS scope
Risk assessment using our toolkit methodology
Questionnaire for the Risk Assessment
Basic steps of a Gap Analysis
When to use tools for ISO 27001