ISO 27001 Free Resources

In this webinar, GDPR consultant Alice Turley gives an overview of ISO 27701 and explains how the Standard can help organisations comply with multiple privacy regimes, discussing:

The webinar covers:

• ISO 27701 implementation and what it means for your business;
• The benefits of an ISO 27701-compliant PIMS; and
• The structure and controls of ISO 27701.

ISO 27701’s approach recognises that by expanding on ISO 27001’s clauses and Annex A controls that relate specifically to data privacy, as well as providing two additional sets of controls specific to data controllers and data processors, your organisation will be able to demonstrate that it has taken the steps to comply with international privacy laws and regulations.

The webinar covers:

• A brief overview of ISO 27701;
• The benefits of ISO 27701;
• How to extend your ISMS (information security management system) to incorporate ISO 27701;
• Considerations when extending your ISMS; and
• Certification to ISO 27701.

Steve Watkins will shed light on what a certification audit entails, and provide you with expert advice to help your organisation succeed the first time. The session will cover:

• Choosing a certification body – why it’s important to make the right choice;
• Preparing for the certification audit;
• The certification audit process; and
• Common audit pitfalls and how to avoid them.

This webinar will deal with the establishment and implementation of an ISMS in line with international information security best practice, including:

• How to get senior management on board and retain their commitment;
• The nine steps to success;
• Common pitfalls and challenges, and how to overcome them; and
• How to cut costs and ensure your project delivers on its objectives.

This webinar will unpack the components of an effective risk management approach, and impart valuable lessons learnt so that attendees can apply it in their organisation at little or no cost. It will cover:

• Establishing a risk management framework;
• Identifying risks to the ISMS;
• Conducting an information security risk assessment;
• Taking risk decisions and choosing risk treatment options; and
• Reporting and following up.