ben Created: Aug 27, 2021 Last commented: Aug 31, 2021

local country leadership in trying to align ISO 27001 certs

Hi, My issue is that I have businesses in a number of European companies that are ISO 27001 certified, and I want to see if I can achieve alignment and consistency. If the scopes are different and they are all certified by different bodies and the end dates are different - what would be the best approach to this. If indeed it is feasible? How would I even assess any alignment - Gap analysis?

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Aug 31, 2021

Considering your scenario, the possibility for alignment and consistency would be based on using a single certification body for all companies, or by reviewing the scopes in a way that they cover roughly similar processes (e.g., software development, R&D, or whatever these companies have in common).

In case these possibilities aren’t feasible, then those companies may be very different, and it might not make sense to align them.

These articles will provide you further information:

What is ISO 27001 https://advisera.com/27001academy/what-is-iso-27001/
Where to start from with ISO 27001 https://advisera.com/27001academy/knowledgebase/iso-27001-where-to-start-most-important-materials/

These materials will also help you regarding ISO 27001:

Book Secure & Simple: A Small-Business Guide to Implementing ISO 27001 On Your Own https://advisera.com/books/secure-and-simple-a-small-business-guide-to-implementing-iso-27001-on-your-own/
ISO 27001 Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Aug 27, 2021

Aug 31, 2021

Expert Advice Community