Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 1574

The specification for information security management systems, developed to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an information security management system."

4 votes

Is it a ISO27001 requirement to record details of all instant messages?

The ISO27002 defines some of the best-practices for implementing ISO27001, maybe you will find here that this type of control is suggested. But again not mandatory. …
M'vy's user avatar
  • 13.1k
17 votes

What is a similar security standard to ISO 27001 with more focus on IT security?

ISO27k is about the 'management of security', not about security itself. Auditors will be concerned by what you are doing to respond to the risks you have identified, if you are really doing what you' …
M'vy's user avatar
  • 13.1k
0 votes

ISO27001 Certification - Business Incident

Your question is targetting two subjects: First, the use of 'another site that does not have an equitable set of physical and logical security controls' in the case of assets within the scope has to …
M'vy's user avatar
  • 13.1k
1 vote

What could be the scope of ISO 27000 standards?

Definition of the scope is driven by the chapter 4.2.1 a and 4.2.1 b of ISO27001. …
M'vy's user avatar
  • 13.1k