Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
Regarding the Risk assessment vs. business impact analysis article, at https://advisera.com/27001academy/knowledgebase/risk-assessment-vs-business-impact-analysis/, what kind of processes do banks need to perform in 12 hours that would be unacceptable?
... ce visits vs. certification audits https://advisera.com/27001academy/knowledgebase/surveillance-visits-vs-certification-audits/
Any thoughts or recommendations for how best to approach this would be helpful and appreciated!
The best way to approach this situation is to prepare a proper internal audit checklist for your internal audit (performing at least one internal audit is also mandatory for certification). This way you will have a good understanding of the status of your ISMS before the certification audit
This article will provide you a further explanation about internal audit:
These materials will also help you regarding internal audit:
... 9001:2015 vs ISO 17025 at https://community.advisera.com/topic/iso-90012015-vs-iso-17025/ for further information on how ISO 9001 is integrated into ISO 17025 so the management requirements do not need to be re-addressed separately within ISO 17025.
Also have a look at the article ISO 17025 vs. ISO 9001 – Main differences and similarities for some more information, available at https://advisera.com/17025academy/blog/2019/07/11/iso-17025-vs-iso-9001-main-differences-and-similarities//
... ce visits vs. certification audits https://advisera.com/27001academy/knowledgebase/surveillance-visits-vs-certification-audits/
This material will also help you regarding audits:
... /iso-9001-vs-iatf-16949-what-is-the-difference/" class="content-link Link" target="_blank">https://advisera.com/16949academy/blog/2019/11/19/iso-9001-vs-iatf-16949-what-is-the-difference/
...
These materials will also help you regarding the impacts of non-compliances:
... /iso-9001-vs-iso-13485/" class="content-link Link" rel="nofollow ugc">https://advisera.com/9001academy/blog/2015/01/21/iso-9001-vs-iso-13485/
ISO 13485:2016 is a process-oriented standard. Product-specific regulation for your type of the product is In vitro diagnostic directive (current valid IVDD 98/79/Eec, and new version IVDR 2017/746).
For more details about ISO 13485 please read the following articles:
trying to understand the difference between the risk treatment plan and the statement of applicability. Shouldn’t one document show what controls need to be implemented, seems like the purpose is the same.
... i>PCI-DSS vs. ISO 27001 Part 1 – Similarities and Differences https://advisera.com/27001academy/knowledgebase/pci-dss/
... ce visits vs. certification audits https://advisera.com/27001academy/knowledgebase/surveillance-visits-vs-certification-audits/