Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results for "iso17025 vs gmp"
1224 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
ISO 9001 Use of Quality Tools
... /iso-9001-vs-six-sigma-how-they-compare-and-how-they-are-different/" class="content-link Link" target="_blank">https://advisera.com/9001academy/knowledgebase/iso-9001-vs-six-sigma-how-they-compare-and-how-they-are-different/ and https://advisera.com/9001academy/blog/2014/07/22/iso-9001-vs-lean-compare-different-2/
-
interested parties
Dear ccruz, thank you *very* much for your extensive reply and pointing to the “who influences”. This gives me the criterion to decide which interested parties to consider. Thank you.
In formulating my question about internal vs. external “influencers” I was looking for defining the intern part of the question. Most people understand the internal interested parties as those within the organization. In one case, I have seen considering the suppliers, the organization and the customers as the internal interested parties. I found this last a quite interesting approach, that is based, I suppose, on the criterion “who can be controlled”.
In my field (development aid), SWOT is often a requirement from the customer and as such is well known from the technical staff, hence difficult to be avoided. IF SWOT is well known, very few knows the prerequisite to get the content of the SWOT matrix but only once I have seen an extended matrix, that induces me to think that there is methodology to draw deduction from the matrix. Does someone point me to a detailed explanation on how to use a swot matrix?
Have a nice day! -
Data processor
... . a protection impact assessmentâ folder as well. The rest of the documents can be used by both controllers and processors alike.
However, if you are a company established in the EU and have employees that makes you a controller in terms of the data of your employees.
To find out more about controllers and processors you can check out our article âÂÂEU GDPR controller vs. processor â What are the differences?â https://advisera.com/eugdpracademy/knowledgebase/eu-gdpr-controller-vs-processor-what-are-the-differences/ -
Standard for BCM
... ISO 22301 vs. ISO 22313 https://advisera.com/27001academy/blog/2013/05/21/iso-22301-vs-iso-22313/
- Understanding IT disaster recovery according to ISO 27031 https://advisera.com/27001academy/blog/2015/09/21/understanding-it-disaster-recovery-according-to-iso-27031/
- NF PA 1600 vs. ISO 22301 â Similarities and differences https://advisera.com/27001academy/blog/2013/11/05/nfpa-1600-vs-iso-22301-similarities-and-differences/
2- The requirements state what SHOULD be done and not HOW to do it right?
Answer: Your assumption is partially correct. ISO 22301, like other ISO management standards, has mandatory requirements (associated to the words must/shall) and also optional requirements (associated to the words may/should), and these only define what must/should be done, and not how. This is like this way to allow each organization to freely define how to implement the requirements.
This material will also help you regarding BCM:
- Book Becoming Resilient: The Definitive Guide to ISO 22301 Implementation https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/ -
Is ISO 27002 acquisition necessary?
... ... O 27001 and ISO 27002:
- The basic logic of ISO 27001: How does information security work? https://advisera.com/27001academy/knowledgebase/the-basic-logic-of-iso-27001-how-does-information-security-work/
- ISO 27001 vs. ISO 27002 https://advisera.com/27001academy/knowledgebase/iso-27001-vs-iso-27002/ -
Mitigar el riesgo
... alitative vs. quantitative risk assessments in information security: Differences and similaritiesâ : https://advisera.com/27001academy/blog/2017/03/06/qualitative-vs-quantitative-risk-assessments-in-information-security/
Por último, recuerda que tienes 4 opciones de mitigación, para más información, por favor, lee este artÃc ulo â4 mitigation options in risk treatment according to ISO 27001â : https://advisera.com/27001academy/blog/2016/05/16/4-mitigation-options-risk-treatment-according-iso-27001/ -
Gap Analysis
... analysis vs. internal audit in ISO 9001 - https://advisera.com/9001academy/blog/2015/02/17/gap-analysis-vs-internal-audit-iso-9001/
- Free ISO 9001:2015 Gap Analysis Tool - https://advisera.com/9001academy/iso-9001-gap-analysis-tool/
- free online training ISO 9001:2015 Foundations Course â https://advisera.com/training/iso-9001-foundations-course/
- book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/ -
ISO 27001 ¿Para personas y empresas?
Respuestas: Con respecto a la primera pregunta, la certificación ISO 27001 es realmente para empresas, aunque una persona también puede obtener la cualificación en ISO 27001 (como auditor o como implementador). Este artículo puede resultarte interesante “Lead Auditor Course vs. Lead Implementer Course - Which one to go for?” : https://advisera.com/27001academy/blog/2014/06/16/lead-auditor-course-vs-lead-implementer-course-which-one-to-go-for/
Y también este "ISO 27001 certification for persons vs. organizations" : https://advisera.com/27001academy/iso-27001-certification/
Con respecto a la segunda pregunta, si tu compañía quiere implementar la ISO 27001, o tu compañía quiere ofrecer servicios relacionados con la ISO 27001, puedes obtener el conocimiento sobre este estándar con cursos como los que te he mencionado arriba, y probablemente la organización le interese pagarte el curso, porque puede ser una oportunidad de negocio para ellos (la compañía necesita siempre un beneficio). Este artículo te puede resultar interesante “How to become an ISO 27001 / ISO 22301 consultant” : https://advisera.com/27001academy/blog/2014/07/21/how-to-become-an-iso-27001-iso-22301-consultant/
Con respecto a la tercera pregunta, generalmente los cursos que conozco tienen una duración de unas 15-20 horas, que puedes hacer en 1 ó 2 semanas. Con respecto el coste, lo siento, pero depende de la compañía, y hay muchas compañías ofreciendo estos cursos, y los precios son muy variables. En cualquier caso, estos cursos gratuitos te pueden interesar:
“ISO 27001:2013 Foundations Course” : https://advisera.com/training/iso-27001-foundations-course/
“ISO 27001:2013 Internal Auditor Course” : https://advisera.com/training/iso-27001-internal-auditor-course/
Finalmente, puedes encontrar aquí recursos gratuitos que puedes usar para aprender los principios básicos sobre la ISO 27001, y puedes usarlos para empezar a trabajar en este sector https://advisera.com/27001academy/es/descargas-gratuitas/ -
ISAE 3402 and ISO 27001
ISO 27002 is a supporting standard that provides guidance and recommendations for the implementation of ISO 27001 Annex A controls.
This article will provide you further explanation about ISO 27002:
- ISO 27001 vs. ISO 27002 https://advisera.com/27001academy/knowledgebase/iso-27001-vs-iso-27002/ -
ICT policies and controls
... ISO 27001 vs. ISO 20000 matrix https://info.advisera.com/27001academy/free-download/iso-27001-vs-iso-20000-matrix
- How to integrate ISO 27001, COBIT, and NIST https://info.advisera.com/27001academy/free-download/how-to-integrate-iso-27001-cobit-and-nist