ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 ISO 9001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS register of requirements Internal Audit Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Certification ISO 14001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

Proposal for ISO 27001 implementation
Risk Assessment and Risk Treatment Methodology
Data/Information Classification in Asset Value
Hi friends, Could you help me please with this doubt: How or where match The Information Asset Value (in terms of confidentiality, integrity and availability of an asset) with the Data/Information classification (e.g: Public, Internal Use, Top secret). ¿Which is the input of which? or both are independent parameters? Or what is their relationship? How to use these two values in the Asset Valuation final? Thank you so much.
Managing the audit process
Examples of goals for the ISMS
Catalogue of threats/vulnerabilities
Necessary documents
Controls in progress
Declaring a Disaster
Currently we have a stated time to: a) assess an incident and declare a disaster (12 hours) b) activate Recovery Plans to re-instate customer systems (8 hours) However, looking at this from a customer perspective, they could argue that this adds up to an RTO of 12+8 = 20 hours. Can anyone offer advice on how to document (contractually) and manage customer expectations? Of course, we are putting the microscope on how we can improve the time for a)
BIA and RA