Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Interested party
-
Análisis de riesgos en un Data Center
Mucho gusto. Agradezco la oportunidad que brindan a través de sus servicios. Deseo saber si puedo abordarles ya que estoy haciendo mi práctica profesional. El reto propuesto es medir los riesgos en el Data Center de la Empresa Gestión sobre la cual no tengo experiencia previa y casi ningún conocimiento al respecto. Necesito Ayuda. -
Operation and practices documented
If the operation and practices are in place but it is not documented, then how to rate that risk, High medium or low -
Implementacion ISO 27001
Me ha sido de gran apoyo toda la documentación y correos enviados; te platico que nosotros estamos en México y deseamos certificarnos en ISO 27001-2013, necesito saber en qué me pueden apoyar (Implementación, cursos, norma, certificación, etc) y cuál es el costo. -
Does all the Policies and procedured need to be in Word/PDf format?
Does all the Policies and procedured need to be in Word/PDf format?. I am right now preparing a communication policy. As per ISO 27001, commuication policy should define who, wat, when and how to comunicate. Can i maintain all these in the excel file, just like shown below. Will that be accepted as a policy? or is there a better way.... What to Communicate When To Whom How Who shall Communicate Records Owner Internal Audit Plan As per the periodicity defined in IQA PL's eMail SQA Internal Audit Records SQA -
Employee equipment in the ISMS scope?
This is an awesome template, but I do have one question. Whyd you leave out data and employee equipment? I consider employee laptops in scope, but it doesnt seem to fit into the categories in the template unless I put it under Processes and Services. -
Responsabilidad de la dirección y gestion de los recursos
Qué me puede decir acerca de la "responsabilidad de la dirección" y la "gestión de los recursos" de la norma iso 27001? -
Some particular controls partially implemented
I declare the status "Partially implemented" for some particular controls in SOA, for which I must write a Policy document. I put this task in Risk Treatment Plan, e.g.: write a Policy document. Is it necessary to review the SOA after implementation (after writing that Policy document) and update the status of controls to "Fully implemented"? -
Type of assets
Can workstations be an Asset class? -
Maintenance of the ISMS
Thank you for your e-mail and available documentation, it has really helped me comprehend the ISO certification procedure.