My CMS

Kategorie: ISO 27001

  • Erinnerung: Erste KRITIS-Frist für Gesundheitssektor bis Ende 2017

    Es ist hinlänglich bekannt, dass Energieversorger (EVU) und Netzbetreiber bis zum 31.01.2018 ein zertifiziertes Informationssicherheitsmanagementsystem nach ISO/IEC 27001 etablieren müssen. Mit der KRITIS-Verordnung sollen Engpässe in der Energieversorgung wegen Störungen in IT-Systemen verhindert werden. Mit diesem Blogeintrag möchten wir Sie daran erinnern, dass sich mit der seit Ende Juni 2017 erneuerten KRITIS-Verordnung u.a. auch Unternehmen…

  • Data Privacy Protection, ISO 27001 and CISPE Code of Conduct

    With mandated compliance with the European Union (EU) General Data Protection Regulation (GDPR) ever closer, organizations that handle personal data of European citizens are rushing to adapt their operations to new requirements to avoid problems with customers and authorities. With respect to cloud infrastructure services, a particular effort may come … The post Data Privacy…

  • Data Privacy Protection, ISO 27001 and CISPE Code of Conduct

    With mandated compliance with the European Union (EU) General Data Protection Regulation (GDPR) ever closer, organizations that handle personal data of European citizens are rushing to adapt their operations to new requirements to avoid problems with customers and authorities. With respect to cloud infrastructure services, a particular effort may come … The post Data Privacy…

  • Does ISO 27001 implementation satisfy EU GDPR requirements?

    Lately, I’ve been asked questions like: “If ISO 27001 is implemented in my organization, will it fully comply with European General Data Protection Regulation (EU GDPR) requirements?” and “Our company is ISO 27001 certified. Are we already compliant with EU GDPR?” The new regulation introduces a set of rules that require … The post Does ISO…

  • Does ISO 27001 implementation satisfy EU GDPR requirements?

    Lately, I’ve been asked questions like: “If ISO 27001 is implemented in my organization, will it fully comply with European General Data Protection Regulation (EU GDPR) requirements?” and “Our company is ISO 27001 certified. Are we already compliant with EU GDPR?” The new regulation introduces a set of rules that require … The post Does ISO…

  • How to integrate COSO, COBIT, and ISO 27001 frameworks

    Recently, the ISO (International Standardization Organization) updated ISO 9001, ISO 14001, and ISO 27001 to make easier to use them together. But, how do they interact with practices outside the ISO world? How to integrate COSO, COBIT, and ISO 27001 frameworks. This article will present how ISO 27001 can be … The post How to…

  • What is the EU GDPR and why is it applicable to the whole world?

    The General Data Protection Regulation (GDPR) will replace the actual Directive (Data Protection Directive 95/46/EC). It will not apply until May 25, 2018, but it does require companies to start preparing now, taking into account some obligations may be onerous and time consuming to implement. What is personal data? Based … The post What is…

  • What is the EU GDPR and why is it applicable to the whole world?

    The General Data Protection Regulation (GDPR) will replace the actual Directive (Data Protection Directive 95/46/EC). It will not apply until May 25, 2018, but it does require companies to start preparing now, taking into account some obligations may be onerous and time consuming to implement. What is personal data? Based … The post What is…

  • Incidents in ISO 22301 vs. ISO 27001 vs. ISO 20000 vs. ISO 28003

    Management system standards, especially those dealing with security and interruptions of business processes, use the term “incident management.” As these management system standards deal with different aspects of managing business processes (IT Service Management, Information Security, Business Continuity, Supply Chain Security, and possibly others), the term is widely used but … The post Incidents in…

  • Incidents in ISO 22301 vs. ISO 27001 vs. ISO 20000 vs. ISO 28003

    Management system standards, especially those dealing with security and interruptions of business processes, use the term “incident management.” As these management system standards deal with different aspects of managing business processes (IT Service Management, Information Security, Business Continuity, Supply Chain Security, and possibly others), the term is widely used but … The post Incidents in…

  • What does ISO 27001 Lead Auditor training look like?

    In the last four years I’ve been preparing and presenting a lot of trainings for ISO 27001 Lead Auditor. At the end, participants understand that this is just the beginning of the journey to reach the “end of the stairs,” and become a professional in ISMS (Information Security Management System) auditing.  … The post What does…

  • What does ISO 27001 Lead Auditor training look like?

    In the last four years I’ve been preparing and presenting a lot of trainings for ISO 27001 Lead Auditor. At the end, participants understand that this is just the beginning of the journey to reach the “end of the stairs,” and become a professional in ISMS (Information Security Management System) auditing.  … The post What does…

  • Resolving cloud security concerns by defining clear responsibilities according to ISO 27017

    Cloud solutions are attractive answers for those who look for cost savings and quick demand response infrastructure, and Internet searches can show you how these kinds of solutions are rapidly growing and being adopted by organizations of all sizes, especially by small and medium-sized organizations. However, their very nature requires … The post Resolving cloud…

  • How to prepare for an ISO 27001 internal audit

    Many people simply rush in to prepare a checklist and perform the ISO 27001 internal audit – the sooner this “needless” job is done, the better. But, such a rush will only create problems, and make the internal audit longer than necessary. So, let’s see what you have to prepare to … The post How to…

  • How to prepare for an ISO 27001 internal audit

    Many people simply rush in to prepare a checklist and perform the ISO 27001 internal audit – the sooner this “needless” job is done, the better. But, such a rush will only create problems, and make the internal audit longer than necessary. So, let’s see what you have to prepare to … The post How to…