ISO 27001 Risk Assessment, Treatment, & Management: The Complete Guide
Risk management is probably the most complex part of ISO 27001 implementation; but, at the same time, it is the...
Risk management is probably the most complex part of ISO 27001 implementation; but, at the same time, it is the most important step at the beginning of your information security project – it sets the...
Is the ISO 27001 Manual really necessary?
Sometimes I receive questions on whether the ISO 27001 Manual is required by the standard, and how to write it....
Sometimes I receive questions on whether the ISO 27001 Manual is required by the standard, and how to write it. I even lost some potential clients because I told them that we do not have...
ISO 27002 – What will the next revision bring?
It’s been six years since the last revision of ISO/IEC 27002 (in 2005) – much has changed in information security...
It’s been six years since the last revision of ISO/IEC 27002 (in 2005) – much has changed in information security since then, and this standard definitely needs some “facelifting”. Since ISO 27002 is closely tied...