Dejan Kosutic

/Dejan Kosutic

About Dejan Kosutic

This author has not yet filled in any details.
So far Dejan Kosutic has created 24 blog entries.

4 mitigation options in risk treatment according to ISO 27001

Most people think risk assessment is the most difficult part of implementing ISO 27001 – true, risk assessment is probably the most complex, but risk treatment is definitely the one that is more strategic and more costly. The purpose of risk treatment seems rather simple: to control the risks identified during the risk ...

The post 4 mitigation options in risk treatment according to ISO 27001 appeared first on 27001Academy.

By | Mai 16th, 2016|Blog, BSI, budget, ISMS, ISMS (BSI, ISO 27001), ISO 27001, ISO27001, mitigation, Notfallmanagement, Penetrationstest, Penetrationstests, residual risk, Risikomanagement, risk options, risk treatment, unacceptable risk, Unternehmen, Veranstaltungen, Zertifizierung & Audit|Kommentare deaktiviert für 4 mitigation options in risk treatment according to ISO 27001

3 strategies to implement any ISO standard

If you’re considering the implementation of ISO 27001, ISO 9001, ISO 14001, ISO 20000, or any other ISO management standard, you’re probably overwhelmed with various approaches on how to start and finish such project successfully. In my opinion, there are three basic options to implement these standards: (1) do it ...

The post 3 strategies to implement any ISO standard appeared first on 27001Academy.

3 strategies to implement any ISO standard

If you’re considering the implementation of ISO 27001, ISO 9001, ISO 14001, ISO 20000, or any other ISO management standard, you’re probably overwhelmed with various approaches on how to start and finish such project successfully. In my opinion, there are three basic options to implement these standards: (1) do it ...

The post 3 strategies to implement any ISO standard appeared first on 27001Academy.

Accreditation vs. certification vs. registration in the ISO world

Things with ISO standards can get really complicated: there are many ISO management standards – the most popular ones are ISO 9001, ISO 14001, ISO 27001, ISO 22301, ISO 20000, etc. – and there are a multitude of ways to get accredited/certified/registered related to those standards. But, that’s not all ...

The post Accreditation vs. certification vs. registration in the ISO world appeared first on 27001Academy.

By | Februar 29th, 2016|accreditation, Blog, BSI, Certification, ISMS, ISMS (BSI, ISO 27001), ISO 14001, ISO 27001, ISO 9001, ISO27001, Notfallmanagement, online training, Penetrationstest, Penetrationstests, registration, Risikomanagement, Unternehmen, Veranstaltungen, Zertifizierung & Audit|Kommentare deaktiviert für Accreditation vs. certification vs. registration in the ISO world

Accreditation vs. certification vs. registration in the ISO world

Things with ISO standards can get really complicated: there are many ISO management standards – the most popular ones are ISO 9001, ISO 14001, ISO 27001, ISO 22301, ISO 20000, etc. – and there are a multitude of ways to get accredited/certified/registered related to those standards. But, that’s not all ...

The post Accreditation vs. certification vs. registration in the ISO world appeared first on 27001Academy.

By | Februar 29th, 2016|accreditation, Blog, BSI, Certification, ISMS, ISMS (BSI, ISO 27001), ISO 14001, ISO 27001, ISO 9001, ISO27001, Notfallmanagement, online training, Penetrationstest, Penetrationstests, registration, Risikomanagement, Unternehmen, Veranstaltungen, Zertifizierung & Audit|Kommentare deaktiviert für Accreditation vs. certification vs. registration in the ISO world

ISO 27001 vs. ISO 27017 – Information security controls for cloud services

The future of ISO 27017, together with ISO 27018, seems quite bright: they define security standards for today’s fastest-growing industry – cloud computing. This topic is so big and so hot, that these two standards might achieve the same level of success as their “older brothers” ISO 27001 and ISO ...

The post ISO 27001 vs. ISO 27017 – Information security controls for cloud services appeared first on 27001Academy.

By | November 30th, 2015|Blog, BSI, cloud security, ISMS, ISMS (BSI, ISO 27001), ISO 27001, ISO 27017, ISO 27018, ISO27001, Notfallmanagement, Penetrationstest, Penetrationstests, Risikomanagement, Unternehmen, Veranstaltungen, Zertifizierung & Audit|Kommentare deaktiviert für ISO 27001 vs. ISO 27017 – Information security controls for cloud services

ISO 27001 vs. ISO 27017 – Information security controls for cloud services

The future of ISO 27017, together with ISO 27018, seems quite bright: they define security standards for today’s fastest-growing industry – cloud computing. This topic is so big and so hot, that these two standards might achieve the same level of success as their “older brothers” ISO 27001 and ISO ...

The post ISO 27001 vs. ISO 27017 – Information security controls for cloud services appeared first on 27001Academy.

By | November 30th, 2015|Blog, BSI, cloud security, ISMS, ISMS (BSI, ISO 27001), ISO 27001, ISO 27017, ISO 27018, ISO27001, Notfallmanagement, Penetrationstest, Penetrationstests, Risikomanagement, Unternehmen, Veranstaltungen, Zertifizierung & Audit|Kommentare deaktiviert für ISO 27001 vs. ISO 27017 – Information security controls for cloud services

ISO 27001 vs. ISO 27018 – Standard for protecting privacy in the cloud

If your company is delivering services in the cloud, you probably have more and more customers asking you how their personal data is protected. ISO 27001 is certainly a good way to do it; however, some enlightened customers might ask you for even more – compliance with ISO 27018, the standard ...

The post ISO 27001 vs. ISO 27018 – Standard for protecting privacy in the cloud appeared first on 27001Academy.

By | November 16th, 2015|Blog, BSI, cloud security, ISMS, ISMS (BSI, ISO 27001), ISO 27001, ISO 27017, ISO 27018, ISO27001, Notfallmanagement, Penetrationstest, Penetrationstests, Risikomanagement, Unternehmen, Veranstaltungen, Zertifizierung & Audit|Kommentare deaktiviert für ISO 27001 vs. ISO 27018 – Standard for protecting privacy in the cloud

ISO 27001 vs. ISO 27018 – Standard for protecting privacy in the cloud

Update 2015-12-01: This blog post was updated on the issue of certification. If your company is delivering services in the cloud, you probably have more and more customers asking you how their personal data is protected. ISO 27001 is certainly a good way to do it; however, some enlightened customers might ...

The post ISO 27001 vs. ISO 27018 – Standard for protecting privacy in the cloud appeared first on 27001Academy.

By | November 16th, 2015|Blog, BSI, cloud security, ISMS, ISMS (BSI, ISO 27001), ISO 27001, ISO 27017, ISO 27018, ISO27001, Notfallmanagement, Penetrationstest, Penetrationstests, Risikomanagement, Unternehmen, Veranstaltungen, Zertifizierung & Audit|Kommentare deaktiviert für ISO 27001 vs. ISO 27018 – Standard for protecting privacy in the cloud