Annex A

All tags →

14 articles tagged "Annex A".


ISO 27001 Control A.6.7: Remote Working

Annex A control 6.7 requires security measures for work done outside the organization's premises. How to secure remote and hybrid work and what auditors check.

5 min read

ISO 27001 Control A.6.8: Information Security Event Reporting

Annex A control 6.8 requires a timely mechanism for staff to report security events. How to build reporting channels people actually use, and what auditors check.

5 min read

ISO 27001 Control A.6.2: Terms and Conditions of Employment

Annex A control 6.2 requires employment agreements to state security responsibilities. What to put in the contract, how to cover contractors, and what auditors expect to see.

6 min read

ISO 27001 Control A.6.1: Screening

Annex A control 6.1 requires background verification of people before they join and on an ongoing basis. How to screen proportionately, stay lawful, and evidence it for audit.

7 min read