ISO 27001 Toolkit Documentation Toolkit

Very Good but needs improvements

Overall Toolkit very informative and covers everything, but needs few changes as some of the procedures or technologies used are very old, some places Organisation Name is still visible, Information Security Policy is too big can be splitted...

I expected better

Policies are written in a chaotic way and the logical sequence of the chapters is not present. Some documents are so long, that I have to split them into several documents as nobody will read such chaotic documents. Also,many formulations are not good enough and do not make sense. For example, in the Access Control Policy it states: "3. Access Control Policy 1. Business and security requirements, as well as the access control rules, will determine who has access to information. The following rules must be followed: • Access controls, both logical and physical. • A business requirement for the user to have access to the information or business process (both the "need-to-know" and "need-to-use" criteria are applicable). • Unless specifically authorized under the terms of this policy, all access is denied. • Whether performed automatically or by an administrator, changes in user permission." Now I have to sit and guess, what the author had in mind. For the price, I guess, it is okay. I have something written down, but many times the text have to be corrected to make sense.

ISO 9000 ISO 27001 well prepared and very useful. Thank you

this is my second experience with ISO DOCS i had already the 9000 before and used it . Consequently i ordered the 27001. 1- the upgrade (transition) from the 2013 to the 2022 was very useful it provided a good start for the GAP analysis in case of transition. 2- The system architecture is very useful . I did not see it in other toolkits thank you