ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 ISO 9001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS register of requirements Internal Audit Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Certification ISO 14001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

Gap Analysis
Hi friends, Could you help me with the following question please?: Is need or mandatory to perform a Gap Analysis before to begin the isms implementation? Its Gap Analysis is about the ISO 27002 controls? Or about the requirements of the ISO 27001? Which is the best way to perform this activity? based in the CMMI? Thanks so much. Best regards.
Assets value
Hi community, I have the following doubt: How you assess the value of an asset regarding the Confidentiality, Integrity and Availability? You do a average among these values? For example, if in my asset's qualitative analysis I assign 5 in confidentiality, 3 in the integrity and 1 in availability, which would be the asset value? 5+3+1/3 = 3 or 5 because is the highest value?&quest; Or, Which way do you recommends for compliance with the ISO? Thank so much. Best regards
ISO 27001/ISO 27002 vs COBIT
Understanding the organization and its context
Customer environment
Internal audit
ISO 27001:2013 and PDCA
Locking a computer
Implement ISO 27001
DR site
When we want to assess the capability of DR site for recovery of business activities what we need to take into consideration (organisation, processes, technology,…)