top of page
ISO27k FAQ
This unusually detailed FAQ poses and addresses Frequently Asked Questions regarding ISO27k, the ISO/IEC 27000 standards.
There is a lot to say, lots of pragmatic advice to offer.
FAQ topics
About the ISO27k standards
Implementing the standards
Managing information risks
ISO27k documentation
Assurance
ISMS maturity
A gentle introduction to the information security standards
Guidance on interpreting and applying the standards in practice
Tips on identifying, analysing, evaluating and treating the risks
Required documents - SoA, RTP, policies, procedures, records ...?
Guidance on auditing and certification for confidence and trust
Ideas on using continual improvement to embed and mature your ISMS
bottom of page