Guest user Created: Jan 12, 2016 Last commented: Jan 12, 2016

How do we identify what are the regulatory, contractual and other requirements

How do we identify what are the regulatory, contractual and other requirements that needs to be part of ISMS. There may be many which need not included under ISMS.

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

You must find a list of laws and regulations in your country that can potentially be relevant for your ISMS - you can find an unofficial list here: https://www.infosecpedia.info/laws-regulatio******************************************** For contractual obligations, you have to find all the contracts your company has made.

The only way to find out if they are relevant to your company is to read them, or ask someone else to read them for you.

This article can also help you: How to identify interested parties according to ISO 27001 and ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-identify-interested-parties-according-to-iso-27001-and-iso-22301//

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community