Take the ISO 27001 course exam and get the EU GDPR course exam for free
LIMITED-TIME OFFER – VALID UNTIL SEPTEMBER 30, 2021

Expert Advice Community

Guest

Starting with SOA

  Quote
Guest
Guest user Created:   Mar 09, 2021 Last commented:   Mar 09, 2021

Starting with SOA

One item that came up on a gap analysis which has me confused:

*** has space in colocation data centers in the *** and ***.

We have 1 product (very low demand) running in *** and 1 product (also low demand) running in ***. We will be shifting more of our VM capacity to *** in the latter part of 2021, and the 2 products running in *** and ***nwill be in ***.

A) we do not host customer data (customers are required to use test data)

B) from a processing perspective, overwhelmingly, it’s on-prem (in colocation data centers) instead of Public Cloud

I am trying to figure out how to get started with the SoA so that I don't do this 2x.

Any advice would be appreciated.

0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Mar 09, 2021

Please note that before you start SoA you have some work to do (e.g., definition of the ISMS scope, Information security policy, risk assessment, and treatment methodology, etc.).

Considering that, we suggest you follow the order of folders and templates provided in the toolkit, so you minimize the complexity of your implementation and risks of rework.

Once you have completed the templates needed to support the SoA, you will have a better understanding of how to be filing it. In short, to start documenting the Statement of Applicability you need to perform a risk assessment and risk treatment, to identify the relevant risks and controls (from ISO 27001 Annex A or other sources) you will implement to treat them. Additionally, you need to identify legal requirements (e.g., laws, regulations, and contracts) which require the implementation of specific controls.

For further information, see:

Additionally, included in the toolkit you will buy you will have access to a video tutorial that will help you to fill in the Statement of Applicability.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Mar 09, 2021

Mar 09, 2021

Suggested Topics