IT Management & Cyber Security

ISO 27001 Annex : A.8.2 Information Classification  Its objective is  To ensure that the information is properly secured, in accordance with its significance to the organization. A.8.2.1 Classification of Information Control-  Information should be classification the basis of their legal provisions, criticality, and  vulnerability  to unwanted release or alteration Implementation Guidance-  Classifications and associated  information security  measures will also include regulatory standards, which take into account market demands for information sharing or restriction. Assets other than information may also be classified according to the information classification stored, processed, otherwise handled or protected by the asset. Information asset owners would be responsible for their classification. The classification system will include classification standards, as well as classification analysis guidelines over time. The level of sec...

ISO 27001 Annex : A.7.3 Termination and Change of Employment  Its objective is to  safeguard the interests of the  organization  as part of the adjustment or termination of employment. A.7.3.1 Termination or change of Employment Responsibilities Control-  Responsibility and  information security  requirements that continue to be valid following  termination or change of employment must be defined, communicated to, and implemented by the employee or contractor. Implementation Guidance-  Communication of termination duties may include on-going information security requirements and legal responsibilities and, as applicable, the duties found in the confidentiality arrangement and the terms and conditions of employment to be maintained for a specified time following the termination of the job of the employee or contractor. Responsibilities  and duties still valid after termination must be included in the terms and conditions of e...

A.7.1  Prior to Employment ISO 27001 Annex : A.7 Human Resource Security  Its object is to  make sure both employees and vendors recognize their duties and are suitable for their positions. A.7.1.1  Screening Control-  Background verification checks on all job applicants will be performed in compliance with applicable rules, legislation, and ethics and should be proportionate to business criteria, classification of the information to be obtained, and potential risks. Implementation Guidance-  All applicable privacy, personal identity  information security , and employment-based policies, should be taken into consideration and should include the following: Availability of appropriate references to character, e.g. one business and one personal; A verification of the applicant’s curriculum vitae (for completeness and correctness); Verification of asserted professional and academic qualifications; Independent biometric identification (pa...