You need to document your processes and procedures to meet the requirements of ISO 27001 Annex A 5.37. A documented operating procedure in ISO 27001 is simply a written guide that tells you exactly how to do a task securely. Think of it as a set of instructions for a particular process. This makes sure […]

You need to follow the policies, rules, and standards you have set for information security, as this is required by ISO 27001 Annex A 5.36. You must make sure that you are compliant with your information security policy, as well as any specific policies, rules, and standards you have created. You should also check these

ISO 27001 Annex A 5.35 is about how a company should independently review its information security management system to ensure it is effective, meeting it’s objectives and operating as intended. What is ISO 27001 Annex A 5.35? The latest version of the ISO 27001 standard is ISO/IEC 27001:2022 (published in October 2022). In the ISO/IEC 27001:2022 Standard

ISO 27001 Annex A 5.33, called Protection of Records, is a rule that asks you to keep records safe. You must protect your records based on rules from the law, government, and contracts. You also need to meet what society and the community expect. This means you must keep your records from being accessed by

ISO 27001 Annex A 5.32 is about Intellectual Property Rights. That means you need to know and follow the rules about intellectual property that come from outside your organisation. You should put these rules into practice. These rules are things like laws, government regulations, and agreements you have made about intellectual property. The standard covers

ISO 27001 Annex A 5.31 Legal, Statutory, Regulatory and Contractual Requirements, asks you to know what outside rules and laws apply to your information security and then make sure you follow them. It specifically deals with the legal and contract rules that tell you exactly how you should handle and use information security. What is

This rule is about ICT Readiness for Business Continuity, which means the IT team having business continuity planned, implemented and tested. What is ISO 27001 Annex A 5.30? The latest version of the ISO 27001 standard is ISO/IEC 27001:2022 (published in October 2022). In the ISO/IEC 27001:2022 Standard the control is titled “ICT Readiness For Business Continuity”. What

This rule is about ensuring that information security is maintained during a disruption, outage or business continuity event. What is ISO 27001 Annex A 5.29? The latest version of the ISO 27001 standard is ISO/IEC 27001:2022 (published in October 2022). In the ISO/IEC 27001:2022 Standard the control is titled “Information Security During Disruption”. What is the ISO 27001

This rule is about collection of evidence, which means a company must have a system to handle the the collection and management of evidence from information security events. What is ISO 27001 Annex A 5.28? The latest version of the ISO 27001 standard is ISO/IEC 27001:2022 (published in October 2022). In the ISO/IEC 27001:2022 Standard the control is