Hi Dejan
For A11.2.7 in the new standard do we need to keep a record of erasure/reuse of equipment?
Sean
Risk assessment & treatment and Statement of Applicability
ISO 27001 Lead Auditor Course
Implementation of A.14.3.1 and A.14.2.5 controls
Supplier policy and risk assessment & treatment
Actions to address risks and oportunities - 6.1.1 General
Hello,
In the documentation toolkit where is documented the requirements described in clause 6.1.1 General (Actions to address risks and opportunities) ? Auditor will probably check the compliance with this requirement.
Thanks.
Users and passwords
Procedure for identification of Requirements
Doing risk assessment department wise
One question why risk assessment in ISO 27001 needs to be done department wise like for IT is different, Sales it is different so what is the need to do it separately.