ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit ISO 9001 Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001/Risk Assessment Table ISO 9001:2015 ISO27001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

Applicability of ISO 27001 procedures in scope with multiple departments
1. If there are, say, 2 business units A & B in the isms scope. On risk assessment it was found that A requires a specific control to mitigate a specific risk (e.g. backup of its systems to maintain business operations in the event of a disaster). So a standard or policy has been written up that states that requirement. But, the standard or policy states the scope is the scope defined in the scope document. And scope document says both A & B are included. So the question is, does that control requirement apply to only A or all units?
ISO 9001 and ISO 27001Requerimientos ISO 27001
Accept the risk
Awareness for a IT team
Doubts about A.14.2.5
External CISO
Security Manager Position
Firewall and suppliers
ISO 27001 courses for beginners
Pre-certification audit