Expert Advice Community

Guest

ISO 27001 controls validation

  Quote
Guest
Guest user Created:   Sep 27, 2017 Last commented:   Sep 27, 2017

ISO 27001 controls validation

We have to start an internal validation of controls for ISO implementation. We will start with validation of effectiveness of one control/domain that is claimed to have its implementation completed. To start with, we need to create a template to perform the internal audit/validation that we will use to capture findings and report on effectiveness.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Sep 27, 2017

Answer: To start with your validation of controls, I suggest you to start with our free ISO 27001 Gap Analysis Tool (https://advisera.com/27001academy/free-iso-27001-gap-analysis-tool/). This tool can provide you a quick overview of how much of ISO 27001 you have implemented so far (management requirements and controls also).

For a more formal and systematic approach I suggest you to take a look at the free demo of our ISO 27001/ISO 22301 Internal Audit Toolkit (https://advisera.com/27001academy/iso-27001-22301-internal-audit-documentation-toolkit/). This toolkit is composed of the following documents: Internal Audit Checklist, Procedure for Internal Audit, Annual Internal Audit Prog ram, and Internal Audit Report, and will help you to plan, perform and document the results of an internal audit compliant with ISO 27001

These articles will provide you further explanation about internal audit:
- How to prepare for an ISO 27001 internal audit https://advisera.com/27001academy/blog/2016/07/11/how-to-prepare-for-an-iso-27001-internal-audit/
- How to make an Internal Audit checklist for ISO 27001 / ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-make-an-internal-audit-checklist-for-iso-27001-iso-22301/

These materials will also help you regarding internal audit:
- ISO Internal Audit: A Plain English Guide https://advisera.com/books/iso-internal-audit-plain-english-guide/
- ISO 27001:2013 Internal Auditor Course https://advisera.com/training/iso-27001-internal-auditor-course/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Sep 27, 2017

Sep 27, 2017

Suggested Topics