Expert Advice Community

Guest

How comprehensive and specific should we describe the implementation methods in SoA?

  Quote
Guest
Evelin Created:   Jun 12, 2024 Last commented:   Jun 18, 2024

How comprehensive and specific should we describe the implementation methods in SoA?

Hi, I still struggle with the SoA. I know it's not mandatory to describe the implementation methods which is practical if I don't yet know what specific measures we want to implement. But in the next step (risk treatment plan), I have to provide information on human, financial and technological resources. This is only possible if we know fairly precisely how implementation is to take place.

Isn't it better to describe the implementation in more detail? But what does that look like? For example, we have a project for log obfuscating that has been started but is not yet finished. It fits in with control 8.11 Data Masking. Do we then mention the project in Implementation at 8.11?
What do we do with the controls that we don't yet know how to implement but think are important?  Only mention a policy that we will write, or a task that we need to re-work an existing policy?
What do we do if we later realize that we need to implement technical measures?

Tags: SoA
0 0

Assign topic to the user

ISO 27001 LEAD IMPLEMENTER COURSE

Become certified as an ISO 27001 consultant.

ISO 27001 LEAD IMPLEMENTER COURSE

Become certified as an ISO 27001 consultant.

Admin
Tihana Jun 14, 2024

Thank you for your question.

We answered it through Experta - you can find the answer here:

Question 1: https://experta.com/shared-post/430dd11e-5691-4156-8ae6-e04e421dfce2
Question 2: https://experta.com/shared-post/91791b96-0b24-405a-a4fd-33eefd798624

Quote
0 1
Guest
Evelin Jun 17, 2024

Let's assume we added a policy for some control in SoA. What do we do if we later realize that we need to implement technical measures? Can we add it after the SoA has been approved by the project sponsor?

Quote
0 0
Admin
Tihana Jun 18, 2024

Thank you for your question.

We answered it through Experta - you can find the answer here: https://experta.com/shared-post/076e2772-3efb-4557-8a6d-9558333d7e5d

Quote
0 1

Comment as guest or Sign in

HTML tags are not allowed

Jun 12, 2024

Jun 18, 2024