Expert Advice Community

Guest

Questions about ISO 27001

  Quote
Guest
Guest user Created:   Jan 12, 2016 Last commented:   Jan 12, 2016

Questions about ISO 27001

0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Guest
AntonioS Jan 12, 2016

I need some ISMS question for prepare interview.
The interviewer will probably focus on the following:
1.- Which safeguards (controls) are listed in ISO 27001
2.- What is the role of risk management in ISO 27001
3.- Which are general steps in the implementation of this standard
4.- How to setup an ISO 27001 project
 

Answer:

Point 1: There are 114 controls, here you can see an overview of them “Overview of ISO 27001:2013 Annex A” : https://advisera.com/27001academy/iso-27001-controls/ And also you can see all controls in detail in our template “Statement of Applicability” here (you can see a free version clicking on “Free Demo” tab) : https://advisera.com/27001academy/documentation/statement-of-applicability/
Point 2: The role of the risk management in the ISO 27001 is very simple (and it is the core of the standard): Identify risks and reduce them applying security controls, which are listed in the Annex A of the ISO 27001. And the risk management is composed on an assessment and on a treatment. To know more information about this, please read this article “ISO 27001 risk assessment & treatment – 6 basic steps” : https://advisera.com/27001academy/knowledgebase/iso-27001-risk-assessment-treatment-6-basic-steps/
Point 3: Here you can find a brief guide to implement the standard in your organization “ISO 27001 implementation checklist” : https://advisera.com/27001academy/knowledgebase/iso-27001-implementation-checklist/ And also this free webinar can be interesting for you “ISO 27001: An overview of ISMS implementation process” : https://advisera.com/27001academy/webinar/iso-27001-overview-isms-implementation-process-free-webinar-demand/
Point 4: It is very important, I mean, you need to define a plan project to implement the ISO 27001 in your organization, so this article will be interesting for you “ISO 27001 project – How to make it work” : https://advisera.com/27001academy/blog/2013/04/22/iso-27001-project-how-to-make-it-work/
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jan 12, 2016

Jan 12, 2016