ISO 27001 Statement of Applicability Explained + Template
The ISO 27001 Statement of Applicability documents the information security controls that apply to your business and is a key document in the information security management system (ISMS). It is one of the first documents and auditor will normally ask for. As a...
ISO 27001 Physical Asset Register Explained + Template
You cannot control what you do not know so the ISO 27001 physical asset register is the register of all things that store, transmit or process data. There are some key things to record about assets. Think of it as a detailed list of all your company’s physical stuff....
ISO 27001 Legal Register Explained + Template
The ISO 27001 legal and contractual register is used to identify which laws apply to your organisation, what contractual requirements customers have placed on you, what regulatory requirements there maybe and what standards you are working towards. It is used to...
ISO 27001 Scope Statement Beginner’s Guide
Introduction You want to lean how to write an ISO 27001 Scope Statement? You are unsure about how to go about it, where to start, what to include and how to write it? In this guide, you will learn what an ISO 27001 Scope Statement is, how to write it yourself and I...
ISO 27001 Context of Organisation Explained + Template
It’s about figuring out who you are, what you do, and what outside forces might affect your information security. Think of it as your company’s information security identity. Table of contentsWhat Is ItApplicability to Small Businesses, Tech Startups, and...
ISO 27001 Asset Management Policy Explained + Template
The ISO 27001 Asset Management Policy sets out the guidelines and framework for how identify, protect and manage assets. It covers the entire lifecycle from acquiring the asset, using the asset to ultimately destroying the asst. It ensures the correct assets are...
ISO 27001 Risk Register Explained + Template
ISO 27001 is a risk based system that means the inclusion of controls and the level of those controls is based on risk. You use a risk register to record what the risk is, you allocate it a risk score and decide how you are going to treat the risk. You then record the...
ISO 27001 Clear Desk and Clear Screen Policy Explained + Template
The ISO 27001 Clear Desk Policy sets out the guidelines and framework for how you protect physical information and high value tangible, real world assets. A clear desk policy is designed to make sure that confidential information is physically protected when not...
ISO 27001 Acceptable Use Policy Explained + Template
There are things that we do and do not want people to do with company computers, systems and data. The acceptable use policy set’s out what we expect and explains it in simple terms. Table of contentsWhat is it?Applicability to Small Businesses, Tech Startups,...