Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results for "iso17025 vs gmp"
1223 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Validity of an ISO 27001 Certification to an organization
With most training providers, when you get the ISO 27001 Lead Auditor certificate, there is no validity period of this certificate; however, some training providers/accreditation bodies might ask of you to maintain the certificate, this is something you need to check with the training provider.
See also these materials:
- article Accreditation vs. certification vs. registration in the ISO world https://advisera.com/blog/2016/02/29/accreditation-vs-certification-vs-registration-in-the-iso-world/
- article How to become ISO 27001 Lead Auditor https://advisera.com/27001academy/knowledgebase/how-to-become-iso-27001-lead-auditor/
- webinar ISO 27001 Lead Auditor Course preparation training https://advisera.com/training/iso-27001-lead-auditor-course/ -
Deviations and exceptions in the Information security policy
Answer:
First of all, the recommendations from ISO 27002 are not mandatory, so you do not have to write everything that is written in this standard; on the other hand ISO 27001 does not require you to define deviations and exceptions. See also this article: ISO 27001 vs ISO 27002: https://advisera.com/27001academy/knowledgebase/iso-27001-vs-iso-27002/
ISO 27002 is not quite clear on what does it mean by deviations and exceptions; generally, deviations could mean that you have to set a process of responding to nonconformities that will occur - e.g. what to do if someone is not complying with policies and procedures. Exceptions could mean defining the situations in which the regular rules are not applicable - e.g. in case of a disruptive incident (for instance, large earthquake), the physical acces s controls will not be applied.
See also this article: What should you write in your Information Security Policy according to ISO 27001? https://advisera.com/27001academy/blog/2016/05/30/what-should-you-write-in-your-information-security-policy-according-to-iso-27001/
This online course will help you learn about writing information security policies and procedures: ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/ -
Any controls for BCMS like ISMS?
... ISO 22301 vs. ISO 22313â : https://advisera.com/27001academy/blog/2013/05/21/iso-22301-vs-iso-22313/
And also this one âISO 27001 vs. ISO 27002â : https://advisera.com/27001academy/knowledgebase/iso-27001-vs-iso-27002/
And this book can be also interesting for you "Becoming Resilient: The Defini tive Guide to ISO 22301 Implementation" : https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/ -
Who owns the risk?
... sk owners vs. asset owners in ISO 27001:2013 https://advisera.com/27001academy/knowledgebase/risk-owners-vs-asset-owners-in-iso-270012013/
This free online course will explain you everything about risk assessment and treatment: ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/ -
RARTP vs NCPA
Risk Assessment and Risk Treatment Vs Non-conformities Corrective and Preventive Actions: How dos the play an impact in real-time? Can someone give me a real-time example on how things move around with these two. TIA -
How to account for mobile devices that are not company owned
... nerally account for mobile devices that are not company owned but that contain (or could contain) company information assets? I consider the devices to be in scope because we will ultimately have a BYOD policy and some sort of mobile device management system to manage their use, but IâÂÂm not sure how I should account for them here. Would I classify them differently on the risk assessment vs. the asset register?
-
Become information security consultant
... or Course vs. Lead Implementer Course - Which one to go for?â : https://advisera.com/27001academy/blog/2014/06/16/lead-auditor-course-vs-lead-implementer-course-which-one-to-go-for/ Or also this one âQualifications for an ISO 27001 Internal Auditorâ : https://advisera.com/27001academy/blog/2015/03/30/qualifications-for-an-iso-27001-internal-auditor/
3.- Acquire experience working for another consultant, information security practitioner, etc.
Finally this article can be also interesting for you âHow to become an ISO 27001 / ISO 22301 consultantâ : https://advisera.com/27001academy/blog/2014/07/21/how-to-become-an-iso-27001-iso-22301-consultant/ -
Risk management for cloud computing
... ISO 27001 vs. ISO 27017 - Information security controls for cloud services" : https://advisera.com/27001academy/blog/2015/11/30/iso-27001-vs-iso-27017-information-security-controls-for-cloud-services/
And also this one "ISO 27001 vs. ISO 27018 - Standard for protecting privacy in the cloud" : https://advisera.com/27001academy/blog/2015/11/16/iso-27001-vs-iso-27018-standard-for-protecting-privacy-in-the-cloud/
And our online course can be also interesting for you because we give more information about the risk management âISO 27001:2013 Foundations Courseâ : https://advisera.com/training/iso-27001-foundations-course/ -
Integrating OHSAS 18001 with ISO 9001 and ISO 14001
... ISO 14001 vs. OHSAS 18001: What is different and what is the same? https://advisera.com/14001academy/blog/2019/08/27/key-iso-14001-benefits-to-customers/nowledgebase/iso-14001-vs-ohsas-18001-what-is-different-and-what-is-the-same/
-
Policy Applicability Questions
... ISO 27001 vs. ISO 27017 â Information security controls for cloud servicesâ : https://advisera.com/ 27001academy/blog/2015/11/30/iso-27001-vs-iso-27017-information-security-controls-for-cloud-services/
And also this one âHow to define the ISMS scopeâ : https://advisera.com/27001academy/knowledgebase/how-to-define-the-isms-scope/
Finally, our online course can be also interesting for you because we give more information about the security controls of the Annex A of ISO 27001:2013 âISO 27001:2013 Foundations Courseâ : https://advisera.com/training/iso-27001-foundations-course/