This document gives guidance on internal investigations within organizations, including: —     the principles; —     support for investigations; —     establishment of the policy, procedures, processes and standards for carrying out and reporting on an investigation; —     the reporting of investigation results; —     the application of remedial measures. This document is applicable to all organizations regardless of type, size, location, structure or purpose. NOTE            See Annex A for guidance on the use of this document.

This document specifies additional requirements for ISO/IEC 17021-1 in order to enable accredited and or peer assessed certification bodies to reliably audit the management system for organizations that develop or use AI systems or both according to ISO/IEC 42001 and to make an evaluation and decision for certification. The application of this document enables the certification bodies to meet the specific technical features and the particular risks in dealing with AI systems according to ISO/IEC 42001. This allows accreditation bodies and peer assessors to assess the competencies of conformity assessment bodies in an efficient and harmonized way and ensures the comparability and reproducibility of certificates confirming conformity with ISO/IEC 42001. The requirements contained in this document shall be demonstrated by any body providing AIMS certification.

This document provides guidelines on the design and development of an organizational resilience policy and strategy. It includes: —     how to design and formulate a resilience policy; —     how to design strategy to achieve the objectives of a resilience policy; —     how to determine priorities for implementation of the organization’s resilience initiatives; —     how to establish a cooperative and coordinated capability to enhance resilience. This document is applicable to organizations seeking to enhance resilience. It is not specific to any industry or sector. It can be applied throughout the life of an organization to enhance resilience. This document does not provide guidance on the development of an organizational resilience capability.

This document gives guidelines for information security incident response in ICT security operations. This document does this by firstly covering the operational aspects in ICT security operations from a people, processes and technology perspective. It then further focuses on information security incident response in ICT security operations including information security incident detection, reporting, triage, analysis, response, containment, eradication, recovery and conclusion. This document is not concerned with non-ICT incident response operations such as loss of paper-based documents. This document is based on the "Detection and reporting" phase, the "Assessment and decision" phase and the "Responses" phase of the "Information security incident management phases" model presented in ISO/IEC 27035‑1:2016. The principles given in this document are generic and intended to be applicable to all organizations, regardless of type, size or nature. Organizations can adjust the provisions given in this document according to their type, size and nature of business in relation to the information security risk situation. This document is also applicable to external organizations providing information security incident management services.

ISO 22301:2019 Auditing Guide: A simple and practical guide to auditing a Business Continuity Management System (BCMS)   Format: ePub               

ISO 22301:2019 – Business Continuity Management System Implementation Guide eBook. Format: ePub   Language: English  *Taxes or charges may apply. The final price, incl

ISO 22301 eLearning Sample Video  

ISO/IEC 27701 – PIMS Implementation and Auditing ToolkitLanguage: English      *Taxes or charges may apply. The final price, including any applicable taxes, will be calculated