Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results for "iso17025 vs gmp"
1219 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Normal incident vs information security incident
"Want to discuss the ISO 27X definition of a security incident...how can do that? But about the ISO definition of a "information security incident"...in day to day operation, it can be very difficult to distinguish between a "normal" incident and a information security incident. I cannot see, how the ISO definition can help...it seems - at first - a bit vague... Taking at face value, You can start classify ALL incident as security incident... But the definition in accord to 27000 is: "An information security incident is made up of one or more unwanted or unexpected information security events that could possibly compromise the security of information and weaken or impair business operations." -
Clarifications reg GAP Analysis.
ISO 27001 does not require you to perform the Gap Analysis prior to the start of the project; you should perform a kind of shortened version of Gap Analysis while writing your Statement of Applicability.
These materials will help you:
- article ISO 27001 gap analysis vs. risk assessment https://advisera.com/27001academy/knowledgebase/iso-27001-gap-analysis-vs-risk-assessment/
- article The importance of Statement of Applicability for ISO 27001 https://advisera.com/27001academy/knowledgebase/the-importance-of-statement-of-applicability-for-iso-27001/
- free ISO 27001 Gap Analysis Tool: https://advisera.com/27001academy/free-iso-27001-gap-analysis-tool/ -
Incident and Service Request Management vs, Incident Management Toolkit
"What different this product https://advisera.com/20000academy/documentation/incident-and-service-request-management-process/ with this product https://advisera.com/20000academy/itsm-incident-management-toolkit/ Basically i need toolkit for Service Desk, with Service Request and Incident, also any catalog/Category what scope area in Service Request and Incident" -
Business Continuity or Disaster Recovery?
... recovery vs Business continuityâ : https://advisera.com/27001academy/blog/2010/11/04/disaster-recovery-vs-business-continuity/
Finally, our online course can be also interesting for you because we give more information about the Business Continuity âISO 27001:2013 Foundations Courseâ : https://advisera.com/training/iso-27001-foundations-course/ -
Alignment of ISO 9001:2015 and ISO/TS 16949
... ISO 9001 vs ISO/TS 16949 https://advisera.com/9001academy/blog/2014/10/01/iso-9001-vs-isots-16949/
- 5 Main Changes Expected in ISO 9001:2015 from the 2014 Draft International Standard (DIS) http:/ /advisera.com/9001academy/knowledgebase/5-main-changes-expected-in-iso-90012015-from-the-2014-draft-international-standard-dis/ -
Differences between ISO 27017 and ISO 27018
... ISO 27001 vs. ISO 27017 - Information security controls for cloud services" : https://advisera.com/27001academy/blog/2015/11/30/iso-27001-vs-iso-27017-information-security-controls-for-cloud-services/
"ISO 27001 vs. ISO 27018 - Standard for protecting privacy in the cloud" : https://advisera.com/27001academy/blog/2015/11/16/iso-27001-vs-iso-27018-standard-for-protecting-privacy-in-the-cloud/
Finally, remember that our online course is very interesting to learn the fundaments of ISO 27001 âISO 27001:2013 Foundations Courseâ : https://advisera.com/training/iso-27001-foundations-course/ -
Validity of an ISO 27001 Certification to an organization
With most training providers, when you get the ISO 27001 Lead Auditor certificate, there is no validity period of this certificate; however, some training providers/accreditation bodies might ask of you to maintain the certificate, this is something you need to check with the training provider.
See also these materials:
- article Accreditation vs. certification vs. registration in the ISO world https://advisera.com/blog/2016/02/29/accreditation-vs-certification-vs-registration-in-the-iso-world/
- article How to become ISO 27001 Lead Auditor https://advisera.com/27001academy/knowledgebase/how-to-become-iso-27001-lead-auditor/
- webinar ISO 27001 Lead Auditor Course preparation training https://advisera.com/training/iso-27001-lead-auditor-course/ -
Deviations and exceptions in the Information security policy
Answer:
First of all, the recommendations from ISO 27002 are not mandatory, so you do not have to write everything that is written in this standard; on the other hand ISO 27001 does not require you to define deviations and exceptions. See also this article: ISO 27001 vs ISO 27002: https://advisera.com/27001academy/knowledgebase/iso-27001-vs-iso-27002/
ISO 27002 is not quite clear on what does it mean by deviations and exceptions; generally, deviations could mean that you have to set a process of responding to nonconformities that will occur - e.g. what to do if someone is not complying with policies and procedures. Exceptions could mean defining the situations in which the regular rules are not applicable - e.g. in case of a disruptive incident (for instance, large earthquake), the physical acces s controls will not be applied.
See also this article: What should you write in your Information Security Policy according to ISO 27001? https://advisera.com/27001academy/blog/2016/05/30/what-should-you-write-in-your-information-security-policy-according-to-iso-27001/
This online course will help you learn about writing information security policies and procedures: ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/ -
Any controls for BCMS like ISMS?
... ISO 22301 vs. ISO 22313â : https://advisera.com/27001academy/blog/2013/05/21/iso-22301-vs-iso-22313/
And also this one âISO 27001 vs. ISO 27002â : https://advisera.com/27001academy/knowledgebase/iso-27001-vs-iso-27002/
And this book can be also interesting for you "Becoming Resilient: The Defini tive Guide to ISO 22301 Implementation" : https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/ -
Who owns the risk?
... sk owners vs. asset owners in ISO 27001:2013 https://advisera.com/27001academy/knowledgebase/risk-owners-vs-asset-owners-in-iso-270012013/
This free online course will explain you everything about risk assessment and treatment: ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/