Bases de connaissances & checklists

Obtenez votre certification ISO/IEC 27001-2.

Identifiez rapidement vos faiblesses afin d’y remédier efficacement grâce à des plans d’actions précis.

Ce questionnaire est basé sur 822 questions réparties en 37 thématiques.

Questionnaire axé sur les thématiques suivantes :

• ISIT – 01 – Policies for information security
• ISIT – 02 – Internal organization
• ISIT – 03 – Mobile devices and teleworking
• ISIT – 04 – Prior to employment
• ISIT – 05 – During employment
• ISIT – 06 – Termination employment
• ISIT – 07 – Responsibility for assets
• ISIT – 08 – Information classification
• ISIT – 09 – Media handling
• ISIT – 10 – Business requirements of access control
• ISIT – 11 – User access management
• ISIT – 12 – User responsibilities
• ISIT – 13 – System and application access control
• ISIT – 14 – Cryptographic controls
• ISIT – 15 – Secure areas
• ISIT – 16 – Equipment
• ISIT – 17 – Operational procedures and responsibilities
• ISIT – 18 – Protection from malware
• ISIT – 19 – Backup
• ISIT – 20 – Logging
• ISIT – 21 – Control of operational software
• ISIT – 22 – Technical vulnerability management
• ISIT – 23 – Information systems and audit considerations
• ISIT – 24 – Network security management
• ISIT – 25 – Information transfer
• ISIT – 26 – Security requirements of information systems
• ISIT – 27 – Security in developement and support processes
• ISIT – 28 – Test data
• ISIT – 29 – Information security in supplier relationships
• ISIT – 30 – Supplier service delivery management
• ISIT – 31 – Management of information security incidents and improvements
• ISIT – 32 – Information security continuity
• ISIT – 33 – Redundancies
• ISIT – 34 – Compliance with legal and contractual requirements
• ISIT – 35 – Information security reviews