Guest
SWOT Analysis and ISO 27001
We are ISO 9001: 2015 certified and we have already performed a SWOT analysis. Can we use this SWOT analysis for ISO 27001 or should the SWOT be more focused on security aspects?
Assign topic to the user
Expert
Rhand Leal
Jul 05, 2019
Answer:
First it is important to note that a SWOT analysis is not mandatory for ISO 27001, but it can help for the identification of organizational context and requirements of interested parties.
Considering that, the SWOT analysis used for ISO 9001 certification can be used for ISO 27001, provided that you now include an information security perspective on the information already gathered.
These articles will provide you further explanation about organizational context and requirements of interested parties:
- How to define context of the organization according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-define-context-of-the-organization-according-to-iso-27001/
- How to identify ISMS requirements of interested parties in ISO 2 7001 https://advisera.com/27001academy/blog/2017/02/06/how-to-identify-isms-requirements-of-interested-parties-in-iso-27001/
Comment as guest or Sign in
Jul 05, 2019
Jul 05, 2019
Jul 05, 2019