We have seen an increased focus on the General Data Protection Regulation (GDPR) by certification body (CB) assessors when conducting ISO 27001 audits.
Annex A of ISO 27001 comprises 114 controls which are grouped into the following 14 control categories.
There are many good reasons to implement an information security management system (ISMS) and get it certified to ISO 27001.
In order to meet the requirements of ‘Asset management’ A.8 from Annex A of ISO 27001, it is necessary to identify organisational assets and define protection
The answer depends on your goals and knowledge of your current position. This blog will look at which is best and when.