IT Management & Cyber Security

  In this article explain ISO 27001 Annex : A.11.2.7  Secure Disposal or Re-use of Equipment, A.11.2.8 Unattended User Equipment & A.11.2.9 Clear Desk and Clear Screen Policy A.11.2.7  Secure Disposal or Re-use of Equipment Control-  To avoid the removal or overriding of sensitive data and software by the disposal or reuse of any device containing storage medium, all devices must be reviewed. Implementation Guidance-  Equipment should be tested to ensure that the storage media is contained or not until disposal or re-use. In order to make original information inaccessible instead of using the standard delete or a software functionality, the storage media with confidential or copyrighted information should physically be destroyed or information destroyed, deleted, or overwritten using techniques. Other information-  Determining whether the items should be physically destroyed rather than sent to repair or discard damaged  equipment containing  ...

A.9.1 Business Requirements of Access Control ISO 27001 Annex : A.9 Access Control  Its Objective is  limiting the access to information and information processing facilities. A.9.1.1 Access Control Policy Control-  An access control policy with supporting business and  information security  requirements should be established, documented, and reviewed. Implementation Guidance-  Asset owners should lay down appropriate rules for access control, access rights, and limits on particular user roles to their assets, with the level of info and the strictness of controls representing the related  information security risks . Access controls are both logical as well as practical, so they should be taken together. Users and service providers should be provided with a clear, transparent statement of the business requirements that access controls should meet. The inbox is always open in my brain, and anyone can get in any time and access me. Turnin...