dwyl / ISO-27001-2013-information-technology-security

:closed_lock_with_key: Probably the most boring-but-necessary repo on GitHub. If you care about the security/privacy of your data...! :white_check_mark:
156 stars 42 forks source link

Add Each ISO Control Objective to the .md file as Table #18

Open nelsonic opened 7 years ago

nelsonic commented 7 years ago

This is a VA Task we can ask someone to perform ...

There's a template:

ISO 27001 Ref Section Control Objective Description or Link to policy/process document.
xyz title desc link

And essentially we want:

ISO 27001 Ref Section Control Objective Description or Link to policy/process document.
A.6.1.1 Information security roles and responsibilities All information security responsibilities shall be defined and allocated. #A.6-Roles-and-Responsibilities
A.6.1.2 Segregation of duties Conflicting duties and areas of responsibility shall be segregated to reduce opportunities for unauthorized or unintentional modification or misuse of the organization’s assets. link

It's pretty much a copy-paste job...