Tag Info

New answers tagged


This is an interesting question which to be honest, I'd not considered. However, now that you raise it, I think you may be onto something. While I don't believe there is anything in any of the regulations which explicitly require you to consider this sort of information, I suspect this is simply due to the letter of the law sometimes being behind social ...


ISO 27001 does not specify which protocols should be used and how they should be used, it specifies how an organization should structure its information security apparatus. An ISO 27001 certified organization must have policies in place and procedures to make sure the policies are adhered to. ISO 27001 also has a scope which is defined by the organization ...

Top 50 recent answers are included