Annex A

1. I love your videos. I want to be clear on something. How do the clauses and the Annex A controls work together for ISO 27001?

In the main part of the standard, clause 6.1.3 d), ISO 27001 requires to select applicable controls based on the result of the risk assessment; on the other hand, Annex A provides a catalog of 114 controls that can be selected to control the risk.

This article will provide you further explanation about work the standard works:

• The basic logic of ISO 27001: How does information security work?   https://advisera.com/27001academy/knowledgebase/the-basic-logic-of-iso-27001-how-does-information-security-work/ 

2. Please does the workshop explain and takes a person through the implementation process.

If you are taking the ISO 27001 Lead Implementer Course, then during the workshop you will learn how to manage the project according to the standard ISO 20700. To learn about the implementation steps, see this webinar:

• ISO 27001: An overview of the ISMS implementation process [free webinar] https://advisera.com/27001academy/webinar/iso-27001-overview-isms-implementation-process-free-webinar-demand/

To get the know-how for the implementation, see this ISO 27001 Documentation Toolkit: https://advisera.com/27001academy/iso-27001-documentation-toolkit/