SPRING DISCOUNT
Get 30% off on toolkits, course exams, and Conformio yearly plans.
Limited-time offer – ends April 25, 2024
Use promo code:
SPRING30

Expert Advice Community

Guest

List of regulatory, contractual and other legal obligations

  Quote
Guest
Guest user Created:   Apr 06, 2020 Last commented:   Apr 06, 2020

List of regulatory, contractual and other legal obligations

I noticed that in some comments on the templates, the links that involve videos or articles to clarify the correct filling of the document are broken, especially those from *infosecpedia.info domains and in some cases from *iso27001standard.com.

I would like to know what to fill in the columns of the "List of regulatory, contractual and other legal obligations"?

0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Apr 06, 2020

Regarding your template, we apologize for the inconvenience. The original template in English has the following links:

  • https://advisera.com/27001academy/knowledgebase/laws-regulations-information-security-business-continuity/
  • https://advisera.com/27001academy/blog/2017/02/06/how-to-identify-isms-requirements-of-interested-parties-in-iso-27001/
  • https://advisera.com/27001academy/knowledgebase/how-to-identify-interested-parties-according-to-iso-27001-and-iso-22301//

Regarding the other templates, we will check the links that need to be updated and send the correct links to you as soon as possible, without additional costs.

If you have any more urgent needs related to links, you can send us the specific links.

Regarding how to fill out the spreadsheet, here is an example:

A customer has a service level agreement with your company which defines, on clause 32-b, that in case of a disruptive incident, access to information system ABC must be restored to at least 30% of normal capacity in no more than 24 hours. In this case, the person responsible for system ABC is responsible to ensure compliance of the system to this requirement. Then your document would be like this:

Interested party: Customer Jon
Requirement: Clause 32-b (recovering access to system ABC to at least 30% of normal capacity in no more than 24 hours)
Document: Service level agreement
Person responsible for compliance: System ABC administrator
Deadline: 24 hours after the occurrence of disruptive incident which makes access to system ABC unavailable)

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Apr 06, 2020

Apr 06, 2020