New answers tagged business-risk
Of the ISO 27000 range of documents, only 27001 is a certifiable standard. The others in the range are guidance and advisory documents. The first step of ISO 27001 implementation is defining the scope. In my experience it would be unusual to have "IT Processes" as a scope - it's usually defined by business area. So for example the Operations part of the ...
Top 50 recent answers are included