ISO 27001 – Where to Start?

Recommended by

Dejan Kosutic

Best Tools to Implement and Learn

Conformio ISO 27001 software

Simplifies ISO 27001 certification effort by guiding you through implementation steps and creating documentation automatically.

Learn more

ISO 27001 Documentation Toolkits

All of the key ISO 27001 documents, records, and templates necessary to complete your certification process.

View All

ISO 27001 Trainings

World’s most popular ISO 27001 courses for beginners, and for experienced professionals.

Enroll Now

Products by framework:

By Type

Where to Start

Other

Solutions for industries:

Dejan Kosutic

ISO 27001 – Where to Start?

Best Articles to Start With

What is ISO 27001? Quick and Easy Explanation.

ISO 27001 Implementation Guide: Checklist of Steps, Timing, and Costs involved

ISO 27001 certification - Everything you need to know about getting ISO 27001 certified

Best Tools to Implement and Learn

Conformio ISO 27001 software

ISO 27001 Documentation Toolkits

ISO 27001 Trainings

Upcoming Webinar

Implementation

How to implement ISO 27001 Annex A controls by using AI

How to implement ISO 27001 using generative AI

Information classification according to ISO 27001

Clear desk and clear screen policy and what it means for ISO 27001

How to define the ISMS scope

How to define context of the organization according to ISO 27001

ISO 27001 2013 vs. 2022 revision – What has changed?

Logging according to ISO 27001 A.8.15

Asset management according to ISO 27001: How to handle an asset register / asset inventory

How to use cryptography according to ISO 27001 control A.8.24

How to manage changes in an ISMS according to ISO 27001 A.12.1.2

AI Tools

Experta: AI-Powered ISO Knowledge Base

ISO 27001 Documentation Toolkit

Documentation

List of mandatory documents according to the ISO 27001 2022 revision

What is the ISO 27001 Information Security Policy, and how can you write it yourself?

Records management in ISO 27001 and ISO 22301

How to manage documents according to ISO 27001 and ISO 22301

One Information Security Policy, or several policies?

Backup policy – How to determine backup frequency

What is a BYOD policy, and how can you easily write one using ISO 27001 controls?

What is a remote access policy and how do you develop it with ISO 27001?

How to structure the documents for ISO 27001 Annex A controls

Is the ISO 27001 Manual really necessary?

Information security policy – how detailed should it be?

Certification

Surveillance visits vs. certification audits

How to know which firms are ISO 27001 certified

Major vs. minor nonconformities in the certification audit

ISO 27001 Certification: What’s next after receiving the audit report?

Training

How to become ISO 27001 Lead Auditor

CISA vs. ISO 27001 Lead Auditor certification

Lead Auditor Course vs. Lead Implementer Course – Which one to go for?

How an ISO 27001 expert can become a GDPR data protection officer

ISO 27001 Internal Auditor training – Is it good for my career?

Importance of security awareness trainings during the pandemic

How to perform training & awareness for ISO 27001 and ISO 22301

Is ISO 27001 the right path for your career?

What does ISO 27001 Lead Implementer training look like?

8 Security Practices to Use in Your Employee Training and Awareness Program

What does ISO 27001 Lead Auditor training look like?

ISO 27001 - Where to start?

Risk Management

ISO 27001 Risk Assessment, Treatment, & Management: The Complete Guide

Why is residual risk so important?

Risk owners vs. asset owners in ISO 27001:2013

Risk appetite and its influence over ISO 27001 implementation

How to prioritize security investment through risk quantification

Catalogue of threats & vulnerabilities

Internal audit

ISO 27001 internal audit: The complete guide

How to perform an ISO 27001 second-party audit of an outsourced supplier

Qualifications for an ISO 27001 Internal Auditor

Dilemmas with ISO 27001 & BS 25999-2 internal auditors

Roles & responsibilities

How can ISO 27001 training help with CISO certification?

RACI matrix for ISO 27001 implementation project

How to document roles and responsibilities according to ISO 27001

Who should be your project manager for ISO 27001/ISO 22301?

Chief Information Security Officer (CISO) – where does he belong in an org chart?

5 criteria for choosing an ISO 22301 / ISO 27001 consultant