Non-conformity during the audit can lead to ISO 9001 or ISO 27001 certification failing! This is how you avoid this…
Why does ISO certification fail due to multiple non-conformities? Read More »
According to ISO27001, an information security policy is a specification document that companies use to regulate their information security.
Information security guidelines Read More »
Why do you need an internal audit for the QMS or ISMS? An internal audit is required for compliance with the applicable standard (e.g. ISO 9001, ISO 27001). The effectiveness of the management system must be reliably guaranteed. This internal audit of individual processes and systems follows a previously established schedule and guidelines. The results
What is an IT assessor? An IT appraiser is an expert in systems, information processing applications and software development. He is also often referred to as an IT expert. On the one hand, there are appointed and sworn experts who are commissioned by courts to examine a factual situation at the expense of the parties
What and why is supplier management important for ISO 27001? The ISO 27001 standard expects companies to carry out a variety of activities to ensure information security. Supplier management requires organizations to carefully select their suppliers and continually monitor their reliability. Therefore, in our ISMS, our supplier management must provide evidence of the following activities:
Supplier Management Read More »
What are deviations according to the ISO standard? As a rule, the term “non-conformity” can be found in the specialist literature. For better understanding, the term deviation is often used in colloquial language. All ISO standards refer to deviations as the situation of an “unmet requirement”. In the ISO 9001 standard there is chapter “3.6.9
What exactly is a deviation? Read More »
Security goals are an important part of an ISMS according to ISO 27001. Find out how to document these measurable goals and objectives
What are security objectives according to ISO 27001? Read More »
Management-Review according to ISO 27001 The ISO 27001 standard expects management to regularly address the current state of information security. According to ISO 27001, the so-called management review compares the current state with the desired state specified in the ISMS. The following topics should be on the management review agenda: Security incidents Risks Expectations Deviations
What is an ISO 27001 management review? Read More »
What is ISO 27004? ISO 27004 can be seen as a guide for measuring the efficiency of an information security management system (ISMS Performance Monitoring). The guidelines provided for the development, measurement, implementation and maintenance of an ISMS are intended to help companies ensure sustainable information security. Evaluating the effectiveness of your ISMS should serve
Why is ISO 9001 certification beneficial? Business customers are increasingly expecting proof of functioning quality control from their suppliers. The easiest way is to introduce a quality management system (QMS) in the company. However, companies need an ISO 9001 certificate in order to be able to prove that they are following their own quality management
Why do I need ISO 9001 certification? Read More »
