ISO 27001 Asset Management: 2022 Controls 5.9 to 5.13 and 7.10
ISO 27001 asset management under the 2022 edition: asset inventory, owners, acceptable use, return of assets, classification, labelling and storage media.
0 Comments
February 11, 2023
HR Security Policy in ISO 27001:2022: People Controls 6.1 to 6.6
Build an HR security policy for ISO 27001:2022: screening, employment terms, awareness training, disciplinary process, leavers and NDAs, with examples.
February 10, 2023
Information Security Policy in ISO 27001:2022 (Control 5.1 Guide)
How to write an information security policy for ISO 27001:2022: the top-level policy, topic-specific policies, approval, review and what auditors check.
February 10, 2023
ISO 27001:2022 Annex A Controls: All 93 Controls, 4 Themes and the 2013 Mapping
All 93 ISO/IEC 27001:2022 Annex A controls in four themes, the 11 new controls, and a full mapping from the 114 controls of the 2013 edition.
February 10, 2023
What Is an ISMS? Concept, Benefits and the PDCA Cycle
What an information security management system (ISMS) is, its key parts, benefits, how to implement one step by step, and how the PDCA cycle fits ISO 27001.
February 10, 2023
Introduction to ISO/IEC 27001: What It Is and How Certification Works
An introduction to ISO/IEC 27001:2022: what the standard requires, clauses 4 to 10, Annex A, who needs it, the certification process, costs and timelines.
February 9, 2023
The ISO/IEC 27000 Series Explained: Key Standards and How They Fit Together
A guide to the ISO/IEC 27000 series: 27000, 27001, 27002, 27005, 27701, 27017, 27018, 27035 and more, what each one covers, and which ones matter for you.
February 9, 2023
How to Audit Company Projects: IT Project Audit Guide and Checklist
How to audit company projects: goals of an IT project audit, the phases to review from start-up to training, and a practical checklist for each phase.
February 8, 2023
How to Audit Cloud Computing and Outsourced Operations
How to audit cloud computing and outsourced operations: shared responsibility, vendor evidence like SOC 2 and ISO 27001, tools, steps and a checklist.
February 8, 2023
How to Audit Applications: Scope, Steps and Security Checklist
How to audit applications for security: scope, steps and a checklist for login, access rights, input handling, data protection, logging and change control.
February 8, 2023