Get a 20% discount on the first year of the Company Training Academy annual plan.
Limited-time offer – ends April 24, 2025
Use promo code:
CTA20

ISO 27001 & 22301 - Expert Advice Community

Home / ISO 27001 & 22301

Discussions

Top Contributors

Expert

Rhand Leal

4151
Discussions
Expert

Carlos Pereira da Cruz

1915
Discussions
Expert

Dejan Kosutic

365
Discussions

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit ISO 9001 Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS Internal Audit register of requirements Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Product: ISO 27001/Risk Assessment Table ISO 9001:2015 ISO27001
Select
CREATE NEW TOPIC +
Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • Interested Parties and Their Requirements

    I have a few questions, it is about interested parties. I am in the process of gathering requirements of interested parties.

  • Do we need to place camera for server room?

    Do we need to place Camera for "server room"?Please suggest regarding this? And what are the things not keep in server room?

  • Not implementing 8.2

    Classification of Information)Is it possible to accept the risk that comes with not implementing 8.2 and still certify for ISO 27001? Background info: 'Shared Service' organisation that offers IT/Human Resources/ Facility Management to other organisations. There are no legal/contractual obligations known for labeling/classifying info.

  • Business continuity certifications for individuals

    I have a query regarding different certifications for individuals. I heard about various certifications such as CBCI (from BCI), CBCP (from DRII) and ISO 23301 Lead Implementer or Lead Auditor so which certification has more importance and what is the importance of going for them.

  • Treating server as a single asset or viewing it separately for hardware and soft

    If you identified an asset for example, an application on a server... Do you have to separate two assets or to treat as an single asset?

  • Assessing consequences in risk assessment

    Regarding consequences assessment - would you recommend assessing one value or split this factor basing on information security aspects or business consequences category? As I see reviewing some examples available on the Internet, sometimes people assess conseqences of loosing confidentiality, integrity or availability separately. The others assess separately financial conseqences, law and regulatory consequences, reputation consequences and so on.

  • ISO 27001 risk methodology and corporate guidelines according to ISO 31000

    If you have already a risk assessment methodology  as per ISO 27001, and another one for OHSAS18001, and you been requested to implement the ISO 31000 guidelines , is it needed to review the existing risk assessment methodologies and replace it with one corporate one as per ISO 31000? Or we can simply refer in our ISO 31000 manual to the other methodologies?

  • Context of the organization in ISO 27001

    What does it mean: context of the organization? The auditor want to see the context of the organization chapter in the isms. Can you help me, what to write in it?

  • Difference between A.8.1.3 and A.8.2.3

    What is the difference between A.8.1.3 Acceptable use of assets and A.8.2.3 Handling of assets?

  • Sharing a server cabinet - is this compliant with ISO 27001?

    One of the business units which is not in our scope for accreditation is partially owned by ***. I know the particular business unit in question does not have access to our network at all but I am awaiting confirmation as to whether we share a server cabinet with them. I don’t think this is the case but if we do, can you please advise if this may hinder our compliance with any of the standards?
Page 512 of 544 pages