Knowledge Bases & Checklists

Get your ISO/IEC 27001-2 certification.

Quickly identify your weaknesses in order to remedy them efficiently thanks to precise action plans.

This questionnaire is based on 822 questions divided into 37 topics.

Questionnaire focused on the following areas:

• ISIT – 01 – Policies for information security
• ISIT – 02 – Internal organization
• ISIT – 03 – Mobile devices and teleworking
• ISIT – 04 – Prior to employment
• ISIT – 05 – During employment
• ISIT – 06 – Termination employment
• ISIT – 07 – Responsibility for assets
• ISIT – 08 – Information classification
• ISIT – 09 – Media handling
• ISIT – 10 – Business requirements of access control
• ISIT – 11 – User access management
• ISIT – 12 – User responsibilities
• ISIT – 13 – System and application access control
• ISIT – 14 – Cryptographic controls
• ISIT – 15 – Secure areas
• ISIT – 16 – Equipment
• ISIT – 17 – Operational procedures and responsibilities
• ISIT – 18 – Protection from malware
• ISIT – 19 – Backup
• ISIT – 20 – Logging
• ISIT – 21 – Control of operational software
• ISIT – 22 – Technical vulnerability management
• ISIT – 23 – Information systems and audit considerations
• ISIT – 24 – Network security management
• ISIT – 25 – Information transfer
• ISIT – 26 – Security requirements of information systems
• ISIT – 27 – Security in developement and support processes
• ISIT – 28 – Test data
• ISIT – 29 – Information security in supplier relationships
• ISIT – 30 – Supplier service delivery management
• ISIT – 31 – Management of information security incidents and improvements
• ISIT – 32 – Information security continuity
• ISIT – 33 – Redundancies
• ISIT – 34 – Compliance with legal and contractual requirements
• ISIT – 35 – Information security reviews