ISO 27001 Guide To Implementation

During these times of uncertainty, your business is experiencing increased levels of threat to your information security.

With staff working from home these threats have amplified because of the vulnerabilities associated with remote desktop protocol (RDP) and virtual private networks (VPN). But is your business prepared?

One methodology for being well planned and prepared is implementing the international standard for information security, ISO 27001.

In this webinar I have presented how to meet and implement ISO 27001 into your organisation. This standard is not just about your IT Department or your IT Contractors, it covers all of your business processes.

[brunom]

Nice explanation! The best one i found so far

[leefogel]

Thanks for compiling this. Very helpful.

[Homebased_Official]

Fantastic breakdown - the only thing I am still struggling with is the difference between Gap analysis and Risk assessment in ISo27001. I do know what they are theoretically . However, I watched another video that cited their own steps as - Senior management buyin, purchase Iso standard, carry out risk assessment, complete SOA and scope, Gap Analysis, which is the internal Audit, findings, senior management, Attestation, certification. And what ISo version is yours ? 2023? Cos I know the2013 version has 114 controls

[stinfluggle]

A very helpful explanation, thank you

[tulpapainting]

Thank you very much for all of this. Are you able to provide a new link to the ISMS manual that you mention? The link in the description is broken.

[dmnickify]

Hello...thanks for your video. I am interested in learning how to implement ISO. Where can I take a course to be educated on ISO 27000?

Perhaps an online course.

Thx

[trentmurray]

Hey, it seems the resources no longer exist. Are you able to provide an updated link to your current ISMS Manual? Thanks!

[anuproy]

I'm qualified ISMS lead auditor certified. I want to work with foreign company. can you give me an idea for that?

[Walruz]

Out of interest, how would you apply the model of Asset Register --> Classification Register --> Risk Register to a monitor? As you mention prior to discussing this how you even included computer monitors, how do you quantify the output of a monitor to determine the classification? For some of these was there a default which meant there was no further work necessary?

[Rups]

One query, 7.0 support should come under “Plan” or under “Do”? Because support is an action after planning. I may be wrong but would love to hear different opinions on this pls.