replaced links and paths
This commit is contained in:
parent
2fbe163fff
commit
99203c6dc5
154 changed files with 542 additions and 542 deletions
|
|
@ -2,5 +2,5 @@
|
|||
|
||||
The organization shall determine external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcome(s) of its information security management system.
|
||||
|
||||
NOTE Determining these issues refers to establishing the external and internal context of the organization considered in [[ISO_31000_OT 5.4.1 Understanding the organization and its context|Clause 5.4.1]] of ISO 31000:2018.
|
||||
NOTE Determining these issues refers to establishing the external and internal context of the organization considered in [Clause 5.4.1](../../ISO_31000_OT%205.4.1%20Understanding%20the%20organization%20and%20its%20context.md) of ISO 31000:2018.
|
||||
|
||||
|
|
|
|||
|
|
@ -5,9 +5,9 @@ The organization shall determine the boundaries and applicability of the informa
|
|||
|
||||
When determining this scope, the organization shall consider:
|
||||
|
||||
a\) the external and internal issues referred to in [[ISO_27001_2022_OT 4.1 Understanding the organization and its context|4.1]];
|
||||
a\) the external and internal issues referred to in [4.1](ISO_27001_2022_OT%204.1%20Understanding%20the%20organization%20and%20its%20context.md);
|
||||
|
||||
b\) the requirements referred to in [[ISO_27001_2022_4.2_MoC Understanding the needs and expectations of interested parties|4.2]];
|
||||
b\) the requirements referred to in [4.2](../../MoCs/ISO_27001_2022_4.2_MoC%20Understanding%20the%20needs%20and%20expectations%20of%20interested%20parties.md);
|
||||
|
||||
c\) interfaces and dependencies between activities performed by the organization, and those that are performed by other organizations.
|
||||
|
||||
|
|
|
|||
|
|
@ -5,7 +5,7 @@ Top management shall establish an information security policy that:
|
|||
|
||||
a\) is appropriate to the purpose of the organization;
|
||||
|
||||
b\) includes information security objectives (see [[ISO_27001_OT 6.2 Information security objectives and planning to achieve them|6.2]]) or provides the framework for setting information security objectives;
|
||||
b\) includes information security objectives (see [6.2](ISO_27001_OT%206.2%20Information%20security%20objectives%20and%20planning%20to%20achieve%20them.md)) or provides the framework for setting information security objectives;
|
||||
|
||||
c\) includes a commitment to satisfy applicable requirements related to information security;
|
||||
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
### 6.1.1 General
|
||||
|
||||
When planning for the information security management system, the organization shall consider the issues referred to in [[ISO_27001_2022_OT 4.1 Understanding the organization and its context|4.1]] and the requirements referred to in [[ISO_27001_2022_OT 4.2 Understanding the needs and expectations of interested parties|4.2]] and determine the risks and opportunities that need to be addressed to:
|
||||
When planning for the information security management system, the organization shall consider the issues referred to in [4.1](ISO_27001_2022_OT%204.1%20Understanding%20the%20organization%20and%20its%20context.md) and the requirements referred to in [4.2](ISO_27001_2022_OT%204.2%20Understanding%20the%20needs%20and%20expectations%20of%20interested%20parties.md) and determine the risks and opportunities that need to be addressed to:
|
||||
|
||||
a\) ensure the information security management system can achieve its intended outcome(s);
|
||||
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
#iso27001/2022/EN
|
||||
# Clause 8.2: Information security risk assessment
|
||||
|
||||
The organization shall perform information security risk assessments at planned intervals or when significant changes are proposed or occur, taking account of the criteria established in [[ISO_27001_OT 6.1.2 Information security risk assessment|6.1.2a]].
|
||||
The organization shall perform information security risk assessments at planned intervals or when significant changes are proposed or occur, taking account of the criteria established in [6.1.2a](ISO_27001_OT%206.1.2%20Information%20security%20risk%20assessment.md).
|
||||
|
||||
The organization shall retain documented information of the results of the information security risk assessments.
|
||||
|
|
@ -5,4 +5,4 @@
|
|||
For the purposes of this document, the terms and definitions given in
|
||||
ISO/IEC 27000 apply.
|
||||
|
||||
[[ISO 27000 MoC]]
|
||||
[ISO 27000 MoC](../../../../../👩🏼⚖️%20Standards%20and%20Regulations/ISO%2027K/ISO%2027000%20MoC.md)
|
||||
|
|
@ -7,7 +7,7 @@ Publicatiedatum: augustus 2023
|
|||
| **0** | **Inleiding** | [[ISO_27001_2023_NL_BT 0 Inzicht in de organisatie en haar context \|BT]] | [[ISO_27001_2023_NL_NN 0 Inzicht in de organisatie en haar context \|NN]] |
|
||||
| **1** | **Onderwerp en toepassingsgebied** | [[ISO_27001_2023_NL_BT 1 Onderwerp en toepassingsgebied \|BT]] | [[ISO_27001_2023_NL_NN 1 Onderwerp en toepassingsgebied \|NN]] |
|
||||
| **2** | **Normatieve verwijzingen** | [[ISO_27001_2023_NL_BT 2 Normatieve verwijzingen \|BT]] | [[ISO_27001_2023_NL_NN 2 Normatieve verwijzingen \|NN]] |
|
||||
| **3** | **Termen en definities** | [[ISO_27001_2023_NL_BT 3 Termen en definities \|BT]] | [[ISO_27001_2023_NL_NN 3 Termen en definities \|NN]] |
|
||||
| **3** | **Termen en definities** | [BT](ISO_27001_2023_NL_BT%203%20Termen%20en%20definities.md) | [[ISO_27001_2023_NL_NN 3 Termen en definities \|NN]] |
|
||||
| **4** | **Context van de organisatie** | | |
|
||||
| 4.1 | Inzicht in de organisatie en haar context | [[ISO_27001_2023_NL_BT 4.1 Inzicht in de organisatie en haar context \|BT]] | [[ISO_27001_2023_NL_NN 4.1 Inzicht in de organisatie en haar context \|NN]] |
|
||||
| 4.2 | Inzicht in de behoeften en verwachtingen van belanghebbenden | [[ISO_27001_2023_NL_BT 4.2 Inzicht in de behoeften en verwachtingen van belanghebbenden \|BT]] | [[ISO_27001_2023_NL_NN 4.2 Inzicht in de behoeften en verwachtingen van belanghebbenden \|NN]] |
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
#iso27001/2023/NL
|
||||
# ISO 27001 2023 NL
|
||||
|
||||
![[ISO_IEC_27001_2023_NL.pdf]]
|
||||

|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue