organizational
All tags →12 articles tagged "organizational".
ISO 27001 Control A.5.11: Return of Assets
Annex A control 5.11 requires personnel and other parties to return all organizational assets on change or termination. How to run a leaver process that gets everything back, digital and physical.
ISO 27001 Control A.5.12: Classification of Information
Annex A control 5.12 requires information to be classified by confidentiality, integrity, availability and interested party requirements. How to design a simple scheme people will use.
ISO 27001 Control A.5.10: Acceptable Use of Information and Other Associated Assets
Annex A control 5.10 requires rules for acceptable use and handling of information and assets to be identified, documented and implemented. How to write rules people read and follow.
ISO 27001 Control A.5.9: Inventory of Information and Other Associated Assets
Annex A control 5.9 requires an inventory of information and other associated assets, including owners. How to build one that stays accurate and actually supports your risk assessment.
ISO 27001 Control A.5.7: Threat Intelligence
Annex A control 5.7 requires information about security threats to be collected and analysed to produce threat intelligence. How to do it usefully without a large security team.
ISO 27001 Control A.5.8: Information Security in Project Management
Annex A control 5.8 requires information security to be integrated into project management. How to build security into projects from the first idea instead of bolting it on at the end.
ISO 27001 Control A.5.5: Contact with Authorities
Annex A control 5.5 requires you to establish and maintain contact with relevant authorities. How to decide who to call, when, and how to have the details ready before an incident.
ISO 27001 Control A.5.6: Contact with Special Interest Groups
Annex A control 5.6 requires contact with special interest groups, specialist security forums and professional associations. How to choose communities and turn what you learn into action.
ISO 27001 Control A.5.3: Segregation of Duties
Annex A control 5.3 requires conflicting duties and areas of responsibility to be segregated. How to find toxic combinations of access and design practical compensating controls.
ISO 27001 Control A.5.4: Management Responsibilities
Annex A control 5.4 requires management to make all personnel apply information security in line with policy. How managers can lead by example and back their teams up.