Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results for "iso17025 vs gmp"
1224 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Controls application
Quick question, does ISO 27001 looks for one to one mapping of risks vs controls in SOA or I could come up with 1 risk in assessment and use 3 to 4 controls to mitigate risk? from SOA? -
Handling risk
What is your view on the handling of raw risk vs treated risk vs mitigated risk when it comes to residual risk and understanding your organisation's appetite for risk? -
ISO 27001 implementer
... or Course vs. Lead Implementer Course â Which one to go for? https://advisera.com/27001academy/blog/2014/06/16/lead-auditor-course-vs-lead-implementer-course-which-one-to-go-for/
This material will also help you regarding ISO 27001 lead implementer:
- ISO 27001:2013 Lead Implementer Course https://advisera.com/training/iso-27001-lead-implementer-course/ -
EU GDPR controller vs. processor
If we have an EU client who is the Controller of data (let's assume client data about previous purchases for a retail/ecommerce store) and we must become a Processor of this data, when are we considered a Controller of the data? I'm assuming that we technically could not be the Controller since we do not have the relationship with the client directly, but I'm a little unsure of the exact nature of that relationship. -
ISO 27001 implementation project
I would like to understand how best to start a project to obtain ISO 27001 audit and certification for our company?Evaluating ISO 27001 vs HITRUST certification. -
Different Audits in ISO 14001
... on audits vs surveillance audits in ISO 14001: https://advisera.com/14001academy/blog/2016/07/11/certification-audits-vs-surveillance-audits-in-iso-14001/
- Article - 5 Tips to help you prepare for your ISO 14001 surveillance audit: https://advisera.com/14001academy/blog/2015/11/23/5-tips-to-help-you-prepare-for-your-iso-14001-surveillance-audit/
- Article - ISO 14001 certification: https://advisera.com/14001academy/blog/2019/08/27/key-iso-14001-benefits-to-customers/nowledgebase/iso-14001-certification/
- Book - The ISO 14001:2015 companion: https://advisera.com/books/the-iso-14001-2015-companion/
- ISO 14001 Lead Implementer Course: https://advisera.com/training/iso-14001-lead-implementer-course/ -
Controlled vs. uncontrolled copies of IMS documents
If any of our interested parties asks for our IMS manuals/documents should we provide a controlled copy or uncontrolled copy? -
Risk assessment and information security audit
... ssessment vs. internal audit in ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/12/08/risk-assessment-vs-internal-audit-in-iso-27001-and-iso-22301/
2. What are an advantage and a disadvantage of an external as compared to an internal audit?
Answer: Second party audits (audits performed by ext ernal personnel with non certification purposes) can bring more expertise and unbiased view for the audit process than internal audits, but on the other hand they are more expensive and the lack of internal specific knowledge may let the external auditors miss situations that are clear for internal auditors.
Third party audits (audits performed by certification bodies with certification purposes) can bring independent and word wide recognized confidence that organization fulfils the standard requirements (through certification issuing), which internal audits cannot provide, but it involves costs for certification maintenance.
These articles will provide you further explanation about types of audits:
- First-, Second- & Third-Party Audits, what are the differences? https://advisera.com/9001academy/blog/2015/02/24/first-second-third-party-audits-differences/
- Dilemmas with ISO 27001 & BS 25999-2 internal auditors https://advisera.com/27001academy/blog/2010/03/22/dilemmas-with-iso-27001-bs-25999-2-internal-auditors/ -
Corrección vs. Acción Correctiva
¿Toda no conformidad detectada en auditorías internas o externas, deben NECESARIAMENTE aplicarse ACCIONES CORRECTIVAS?, aún si con las correcciones fueron suficientes o eficaces. -
AS9100 vs AS9110 requirements
I had flown a requirement for AS9110 to one of our potential suppliers. He phoned me and told me that his AS9100 would satisfy the requirement (per his third party auditor). The supplier was NOT the Original Equipment manufacturer. Can an AS9100 be used in lieu of an AS9110 for a NON-OEM Repair?