IT Management & Cyber Security

  ISO 27001 Annex : A.15.2 Supplier Service Delivery Management  It’s objective  is to maintain, in compliance with supplier agreements, an agreed level of information security and delivery of service. A.15.2.1  Monitoring and Review of Supplier Services Control-  Organizations shall  monitor, review  and audit the provision of service to suppliers on a regular basis. Implementation Guidance –  Monitoring and review of  supplier services  will ensure respect for the terms and conditions of information security of the arrangement and careful monitoring of incidents and issues related to  information security . This will include a process of service management between the client and the supplier: Monitor the level of service performance to verify agreement compliance; Review the supplier’s service reports and schedule progress meetings on a regular basis as required by the agreements; conduct supplier audits and follow-up on reported ...

  In this article explain ISO 27001 Annex : A.11.2.7  Secure Disposal or Re-use of Equipment, A.11.2.8 Unattended User Equipment & A.11.2.9 Clear Desk and Clear Screen Policy A.11.2.7  Secure Disposal or Re-use of Equipment Control-  To avoid the removal or overriding of sensitive data and software by the disposal or reuse of any device containing storage medium, all devices must be reviewed. Implementation Guidance-  Equipment should be tested to ensure that the storage media is contained or not until disposal or re-use. In order to make original information inaccessible instead of using the standard delete or a software functionality, the storage media with confidential or copyrighted information should physically be destroyed or information destroyed, deleted, or overwritten using techniques. Other information-  Determining whether the items should be physically destroyed rather than sent to repair or discard damaged  equipment containing  ...

A.7.1  Prior to Employment ISO 27001 Annex : A.7 Human Resource Security  Its object is to  make sure both employees and vendors recognize their duties and are suitable for their positions. A.7.1.1  Screening Control-  Background verification checks on all job applicants will be performed in compliance with applicable rules, legislation, and ethics and should be proportionate to business criteria, classification of the information to be obtained, and potential risks. Implementation Guidance-  All applicable privacy, personal identity  information security , and employment-based policies, should be taken into consideration and should include the following: Availability of appropriate references to character, e.g. one business and one personal; A verification of the applicant’s curriculum vitae (for completeness and correctness); Verification of asserted professional and academic qualifications; Independent biometric identification (pa...