To ensure a successful ISO 27001 implementation, it is important to involve the key individuals and groups responsible for managing information security in your organization. This includes the ISO 27001 implementation team, which will oversee the ent...
After the release of ISO/IEC 27001:2022 on October 25, 2022, here is a high-level analysis of the significant changes introduced in the standard. In summary, the most notable change in the standard is the comprehensive adoption of controls from ISO 2...
In this blog, the focus shifts towards internal audit, specifically in the context of ISO 27001 certification, the International Standard for Information Security Management. We will take a step back and examine internal auditing from the perspective...
"What is our strategy for identifying assets in our information security risk assessment? This question encompasses two key elements: first, determining which assets to incorporate, and second, deciding the level of detail to include in the asset lis...
To comply with 'Asset management' A.8 outlined in Annex A of ISO 27001 certification, it becomes imperative to identify organizational assets, assign suitable protection responsibilities, and ensure that information is adequately safeguarded based on...
After supporting more than 350 organizations in attaining ISO 27001 certification, we frequently encounter inquiries about the essential stages or fundamental components when establishing a successful information security management system. When we p...
