Tag: "Product: ISO 27001 Documentation Toolkit" - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • How to exclude information in the definition of scope?

    We have purchased your „ISO 27001 Power Toolkit" and would need support. We, ***, offer our customers a SaaS solution. We are currently preparing for TISAX certification and are in the process of setting up the ISMS. TISAX is largely based on ISO 27001.

    Here is my question about the scope to be determined:

    Our headquarters are in the ***  with branches in various countries among others in ***. Only the branch based in *** should be certified and defined in the scope. The design and maintenance of the IaaS and SaaS is specified and executed by the *** headquarters, Therefore we want to treat this area (hosting) and thus its service lines as a supplier. The problem is that employees in our IT department in the *** branch take on maintenance and administrative tasks for the EMEA area of hosting. How can this be excluded in the definition of the scope?

  • Underscores in a file name

    One point that wasn’t answered is regarding underscores in a file name.

    In terms of best practice and your opinion, given that all the document templates in your toolkit have underscores is this something you recommend? What is the reason for having underscores in the file name?

  • Document/template used for the context of the organisation in ISO 27001 toolkit

    Can you help me with one question, please?

    Which document/template is used for the context of the organisation in the ISO27001 toolkit?

Page 3 of 3 pages