• (0)
    ISO-27001-ISO-22301-blog

    All posts by: Dejan Kosutic

    What is an Information Security Management System (ISMS) according to ISO 27001?
    Update 2022-05-31. If you’ve started an  ISO 27001 implementation, you’ve surely come up with the term Information Security Management System...
    Update 2022-05-31. If you’ve started an  ISO 27001 implementation, you’ve surely come up with the term Information Security Management System or ISMS. Pretty vague term, isn’t it? And yet, the ISMS is the main “product”...
    3 strategic options to implement any ISO standard
    If you’re considering the implementation of ISO 27001, ISO 9001, ISO 14001, ISO 20000, or any other ISO management standard,...
    If you’re considering the implementation of ISO 27001, ISO 9001, ISO 14001, ISO 20000, or any other ISO management standard, you’re probably overwhelmed with various approaches on how to start and finish such project successfully....
    ISO 27001 vs. ISO 27017 – Information security controls for cloud services
    The future of ISO 27017, together with ISO 27018, seems quite bright: they define security standards for today’s fastest-growing industry...
    The future of ISO 27017, together with ISO 27018, seems quite bright: they define security standards for today’s fastest-growing industry – cloud computing. This topic is so big and so hot, that these two standards...
    3 phases of delivering an ISO 27001/ISO 22301 consulting job
    If you’re an independent consultant at the beginning of your career, you’re probably wondering how to perform your first consulting...
    If you’re an independent consultant at the beginning of your career, you’re probably wondering how to perform your first consulting job for ISO 27001 or ISO 22301 implementation. But, don’t worry – here’s what you need...
    How to handle access control according to ISO 27001
    Access control is usually perceived as a technical activity that has to do with opening accounts, setting passwords, and similar...
    Access control is usually perceived as a technical activity that has to do with opening accounts, setting passwords, and similar stuff – and it is true: access control does include all these things, but access...
    How to make your investment in ISO 27001 profitable
    Nothing motivates executives more than profits; so, if you’re proposing your ISO 27001 project to your top management, you should...
    Nothing motivates executives more than profits; so, if you’re proposing your ISO 27001 project to your top management, you should figure out how this project can increase the profit of your company. “But how?” you...