Skip links

ISO 2700x

ISO 27001

FREE ISO 27001 Toolkit

FREE ISO 27001 Toolkit The FREE ISO27k Toolkit consists of a collection of ISMS-related materials contributed by members of the ISO27k Forum, either individually or through collaborative working groups organized on the Forum. We are very grateful for their generosity in allowing us to share them with you. The Toolkit is a work-in-progress: further contributions are most welcome To download […]

Risk management

Risk Management – Great Start Guide (101)

Risk Management Risk management in IT involves the identification, organization, and management of risks in an organization. It is normally done in a way that balances the costs associated with using security solutions to protect the organization and the benefits that they bring. In simpler terms, risk management allows the organization to spend more on […]

Chief Audit Executive Conference Erdal Ozkaya

Chief Audit Executive Conference 2019- Free to join

Chief Audit Executive Conference The United Arab Emirates Internal Audit Association (UAE-IAA) is a vibrant organization founded by a dedicated group of practicing volunteers to serve the profession and the needs of local internal auditors. The UAE IAA was chartered by a government decree from the UAE Ministry of Community Development and is dully affiliated […]

IT Sec Policy

What is IT Security Policy :0

What is IT Security Policy ? The essence of an IT security policy, is to establish guidelines and standards for accessing the organization’s information and application systems. As IT infrastructures have become more complex and organization’s resources have become more distributed, the need for improved information security has increased. An IT security policy, facilitates the […]

ISO 27001

Checklist of ISO 27001 Mandatory Documentation

Checklist of ISO 27001

A great documentation by Advisera, which provides you clause by clause Explanation of ISO 27001, which I believe can help you to learn more about ISO 27001.

The PDF document explains each clause of the ISO 27001 standard, while providing guidelines on what needs to be done to meet each requirement. This white paper will help you understand how to protect the confidentiality, integrity, and availability of information in your company, by demonstrating:

  • how to apply a process approach
  • how to plan and analyze processes within the organization
  • how to implement the Plan-Do-Check-Act cycle
  • how to evaluate performance in order to make improvements
  • how to address information security risks by being well prepared

To download the document :

https://info.advisera.com/hubfs/27001Academy/27001Academy_FreeDownloads/Clause_by_clause_explanation_of_ISO_27001_EN.pdf

More ISO

https://www.erdalozkaya.com/category/iso-20000-2700x/

Continue reading Checklist of ISO 27001 Mandatory Documentation

ISO 27001

ISO 27001 domains – Crush Course

ISO 27001 domains I am teaching for the last 3 years ISO 27001 classes Australia wide, and wanted to put together some resources that can be used by my students or blog followers. Below you will find the main domains which is covered under ISO27001 and please look for more in other posts. Enjoy: ISO/IEC […]

ISO 27001

ISO/IEC 27001:2005 Information Technology

Source : IsecT Ltd. ISO/IEC 27001 is the formal set of specifications against which organizations may seek independent certification of their Information Security Management System (ISMS). ISO/IEC 27001 specifies requirements for the establishment, implementation, monitoring and review, maintenance and improvement of a management system – an overall management and control framework – for managing an organization’s information […]

Explore
Drag