ISO/IEC 27001:2013 Information Security Management System Implementation Templates
R10,000.00
Description
Utilising these state-of-the-art templates can enable your company to build effective processes to protect the integrity, availability, and confidentiality of information. Based on cultivating risk and security awareness, assessing risk and the treatment thereof, these templates utilize multiple avenues to ensure focused results. Using ISO/IEC 27001:2013 has multiple benefits including significantly improved control, secure information exchange, compliance with legal, statutory, and regulatory requirements, exposure reduction, and protection of company assets. As security needs become increasingly important, conformance to the ISO/IEC 27001:2013 Standard has become a must. Theses templates allow your business to meet these requirements and promote stakeholder confidence. Using ISO/IEC 27001:2013 provides you with a unique competitive advantage no matter your company’s size or industry. Take full advantage and harness your competitive edge.
FEATURES
Format
- Written in International English.
- Compatible with Microsoft Office 2010 / 2011 / 2013 / 2016.
- Fully editable professional templates MS Word or Excel files.
- Clear, concise, easy-to-follow content that meets the requirements of the standard and provides long-term relevance and value.
- Written in a manner that makes the requirements of the standard easy to understand and implement in-house.
- Files available immediately for download.
- Developed for ease of use.
Email Support
- ISO Experts ready to clarify templates usage through prompt email assistance from
- Guidance and expert review of documentation.
- Dedicated Consultant available to discuss issue resolution and provide professional direction.
Templates Contents
- 60 documents consisting of Presentations, Policies, Plans, Procedures, Registers, Forms and Templates.
- Includes a full set of mandatory and non-mandatory documentation based on the ISO/IEC 27001:2013 Standard, complete with instructions and guidance to assist you.
- Throughout each section and document, you will find concise instructions to complete and customise your documentation to ensure it is personalised to your company. (NOTE: Green text are examples only. Red text are guidelines that require to be replaced with the correct information.)
TEMPLATES PURPOSE
These templates work alongside existing Management Systems and provide a simple, comprehensible and effective approach to compliance. Designed to save you time, these templates simplify the implementation process and demonstrate the effective operation of your Information Security Management System providing fully-fledged documentation.
TEMPLATES DOCUMENTS
| 1. | List of Documents |
| 1. | ISO/IEC 27001:2013 Information Security Management System Implementation Guide |
| 2. | ISO/IEC 27001:2013 Information Security Management System Implementation Plan |
| 1. | Templates – Process Flow |
| 2. | Templates – Policy |
| 3. | Templates – Procedure |
| 4. | Templates – Form and Templates |
| 1. | List of Legal Regulatory Contractual and other Requirements |
| 2. | List of Internal and External Issues |
| 3. | Strategic Plan |
| 4. | Information Security Scope |
| 5. | List of Interested Parties |
| 6. | Overall Process Sequence and Interaction |
| 1. | Specification of Information System Requirements |
| 2. | Incident Log |
| 3. | Information Security Policy |
| 4. | Identification of Requirements Procedure |
| 5. | Incident Management Procedure |
| 6. | Security Clauses for Suppliers and Partners |
| 7. | ISMS Letter of Appointment |
| 8. | Meeting Minutes Template |
| 1. | Risk Assessment and Risk Treatment Methodology |
| 2. | Statement of Applicability |
| 3. | List of Objectives |
| 1. | Documents Change Request Sheet (Master Index) |
| 2. | Inventory of Assets |
| 3. | Training and Awareness Plans |
| 4. | Control of Documents and Records Procedure |
| 5. | Communications Procedure |
| 1. | Operating Procedures for Information and Communication Technology |
| 2. | Risk Assessment |
| 3. | Risk Assessment and Treatment Report |
| 1. | Internal Audit Plan |
| 2. | Internal Audit Programme or Schedule |
| 3. | Internal Audit Report |
| 4. | Management Review Meeting Agenda |
| 5. | Management Review Meeting Minutes |
| 6. | Opening Closing Meeting Register |
| 7. | Internal Audit Procedure |
| 8. | Management Review Procedure |
| 9. | Monitoring Measurement Analysis and Evaluation Procedure |
| 1. | NCR & CAR Index |
| 2. | NCR & CAR Report |
| 3. | Non-conformance and Corrective Action Procedure |
| 1. | Acceptable Use of Assets Policy |
| 2. | Access Control Policy |
| 3. | Backup Policy |
| 4. | Bring Your Own Device Policy |
| 5. | Change Management Policy |
| 6. | Clear Desk and Clear Screen Policy |
| 7. | Configuration Management Policy |
| 8. | Cryptographic Controls Policy |
| 9. | Disaster Recover and Business Continuity Policy |
| 10. | Information Classification Policy |
| 11. | Password Policy |
| 12. | Removable Media Policy |
| 13. | Retention Destruction Deletion and Decommissioning Policy |
| 14. | Secure Development Policy |
| 15. | Supplier Security Policy |
| 16. | Teleworking Policy |
ISO 27001:2013 Samples
