Is there a source where each control set in Annex A is mapped against the relevant threats described in ISO27005?
Correction, corrective and preventive action
"May I know difference correction action request & preventive action request? when to issue for this two?"
Clause 7.1.3 Infrastructure
Hi!
May I seek for your advice on how to audit the Clause 7.1.3 Letter B, C and D. Do they need to create a documented procedure for this clause. and what are the other related clause for I.T or 7.1.3 letter B, C and D.
Thanks
Monitoring and measuring as inputs to the management review
"Regarding MANAGEMENT REVIEW INPUT 9.3.2 c (5) how can monitoring & measurement results can be an input...how to address it. because what I think for our organization it is a vast subject"
Lista de verificación
Como hacer una lista de verificación para la implementación de un SGC ISO 9001:2015, en base a los requisitos obligatorios por la norma internacional
Becoming a consultant and internal auditor
I want to be a consultant of ISO 9001:2015. I am certified to ISO 9001:2015 Lead Auditor course by IRCA. But I need to know a few basics.
NC regarding QMS effectiveness monitoring
We are a software development company, we do not make a product. We have a NC in regards to not monitoring effectiveness of the QMS. What can a service company monitor. We have customer satisfaction and audit results per process. What else can we do?
Implementing ISO without certification
Can a none ISO certified business make use of the ISO documentation?
Product requirements review record
Can you help with Product/service requirements review records. What do I need to do or supply here?. Could you please advise which specific template suites best for controls, outputs and changes?