ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Expert

Rhand Leal

4151
Discussions
Expert

Carlos Pereira da Cruz

1915
Discussions
Expert

Dejan Kosutic

365
Discussions

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit ISO 9001 Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001/Risk Assessment Table ISO 9001:2015 ISO27001
Select
CREATE NEW TOPIC +
Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • Catalogue of threats/vulnerabilities

  • Necessary documents

  • Controls in progress

  • Declaring a Disaster

    Currently we have a stated time to: a) assess an incident and declare a disaster (12 hours) b) activate Recovery Plans to re-instate customer systems (8 hours) However, looking at this from a customer perspective, they could argue that this adds up to an RTO of 12+8 = 20 hours. Can anyone offer advice on how to document (contractually) and manage customer expectations? Of course, we are putting the microscope on how we can improve the time for a)

  • BIA and RA

  • Online service

  • ISO 27005

  • Frequency of updating the Statement of Applicability

    I would just like to inquire on the frequency of updating the statement of applicability? Is there a need to update it after ISMS implementation?  Say for example during the initial phase, one of the controls is not yet implemented but after a year, it was already documented and already in practice.  Do we have to update the SOA because of that change?

  • Risks database

    Hi Everyone , Does anyone know where can we find a public risks database. Thank you .

  • CISA and CISM
Page 471 of 544 pages