ISO 27001_Audit

A

Aishwariya

Registered
Hi. I am Aishwariya From UAE, I am looking for audit tips on the group policy if the company is not using Microsoft suite.. mostly its G suite.. what would be the audit questions and evidences I might be looking for here?
 
Y

yodon

Leader
Super Moderator
With no intention of being disrespectful, it sounds like you're being asked to audit although you don't have any audit training or experience?
 
A

Aishwariya

Registered
Hi.. thank you yodel, nothing to disrespect your reply and intention, but asking question does not mean that I do not have experience, every forum is a learning, I have asked to learn. Not only can auditor asks the questions, also the audit..
 
Jim Wynne

Jim Wynne

Leader
Admin
Aishwariya said:
Hi. I am Aishwariya From UAE, I am looking for audit tips on the group policy if the company is not using Microsoft suite.. mostly its G suite.. what would be the audit questions and evidences I might be looking for here?
Click to expand...
If you're doing an internal audit, it should be informed by your company's own requirements. Presumably, those internal requirements are based on requirements of the standard. BTW, "G Suite" is now Google Workspace.
 
John Broomfield

John Broomfield

Leader
Super Moderator
Aishwariya said:
Hi. I am Aishwariya From UAE, I am looking for audit tips on the group policy if the company is not using Microsoft suite.. mostly its G suite.. what would be the audit questions and evidences I might be looking for here?
Click to expand...

The management system responsible for the design, delivery and upkeep of Google Apps received ISO 27001 certification over ten years ago according to this report:

https://www.itpro.co.uk/640891/google-apps-for-business-gets-iso-27001-certification

So, it appears that you have no inherent problem using the “G-Suite” instead of Office 365.
 
G

geoffairey

Involved In Discussions
John Broomfield said:
The management system responsible for the design, delivery and upkeep of Google Apps received ISO 27001 certification over ten years ago according to this report:

Google Apps for Business gets ISO 27001 certification

So, it appears that you have no inherent problem using the “G-Suite” instead of Office 365.
Click to expand...

The system itself (Google Workspace) may be Certified, but if it's not used in a compliant way by the organisation, then it won't comply with the standard. e.g if shared logons are used, this would fail basic access control requirements.
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
T ISO 27001 sample audit report IEC 27001 - Information Security Management Systems (ISMS) 5
B Integrating ISO 9001/27001 External Audits - Audit Time Reduced? Discounts? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
A ISO 27001 function wise or department wise audit questionnaire with control & clauses IEC 27001 - Information Security Management Systems (ISMS) 3
C ISO 27001:2013 ISMS Internal Audit Checklist/Questionnaire IEC 27001 - Information Security Management Systems (ISMS) 36
S Checklist for ISO 27001 ISMS Internal Audit IEC 27001 - Information Security Management Systems (ISMS) 3
A ISO 27001:2005 ISMS Internal Audit Checklist/Questionnaire IEC 27001 - Information Security Management Systems (ISMS) 14
H Calculation of Audit Man-days; ISO 27001 Registrars and Notified Bodies 14
L ISO 27001:2022 IEC 27001 - Information Security Management Systems (ISMS) 1
Richard Regalado Informational ISO/IEC 27001:2022 has been published IEC 27001 - Information Security Management Systems (ISMS) 0
B Multisite Certification Requirements for ISO 27001 IEC 27001 - Information Security Management Systems (ISMS) 8
D ISO 27001:2022 Harmonisation Timeline IEC 27001 - Information Security Management Systems (ISMS) 3
R ISO 27001 Mandatory Policies , Procedures and Records IEC 27001 - Information Security Management Systems (ISMS) 0
T ISO 27001 - 4.3 c - Interfaces and dependencies between activities - how to consider these? IEC 27001 - Information Security Management Systems (ISMS) 2
H Asset Inventory - documents and people (ISO 27001) IEC 27001 - Information Security Management Systems (ISMS) 1
R ISO 27001 implementation IEC 27001 - Information Security Management Systems (ISMS) 3
Y How can i integrate ISO 13845 into ISO 27001? ISO 13485:2016 - Medical Device Quality Management Systems 4
N ISO 27001 for Jumb Burger - Risk Assessment sheet IEC 27001 - Information Security Management Systems (ISMS) 14
M Choosing Auditors - ISO 9001 / ISO 27001 (UK) IEC 27001 - Information Security Management Systems (ISMS) 2
M ISO 27001 ISMS scope for companies with subsidiaries IEC 27001 - Information Security Management Systems (ISMS) 0
S How to Learn all aspects of ISO 27001:2013 | The best way to grab the knowledge on 27001:2013 (Step by Step) IEC 27001 - Information Security Management Systems (ISMS) 7
P Relevance of Offsite backups process compliance and ISO 27001 certification. IEC 27001 - Information Security Management Systems (ISMS) 3
P Why does the standard clause use the term Issues in place of Context - ISO 27001 4.1 IEC 27001 - Information Security Management Systems (ISMS) 3
P What is the exact difference between Risk and Opportunity in context of ISO 27001? IEC 27001 - Information Security Management Systems (ISMS) 7
L Implementation of ISO 27001 as part of the GDPR compliance journey Other Medical Device Related Standards 2
Le Chiffre Is ISO/IEC 27001 appropriate for most small businesses? IEC 27001 - Information Security Management Systems (ISMS) 2
A Policies Mandatory or essential for ISO 27001 implementation IEC 27001 - Information Security Management Systems (ISMS) 6
A ISO/IEC 27001 - Issue during implementation of system IEC 27001 - Information Security Management Systems (ISMS) 3
A ISMS implementation - ISO 27001: 2013 Company Objectives IEC 27001 - Information Security Management Systems (ISMS) 1
Richard Regalado ISMS Auditing Guideline V2 (based from ISO/IEC 27001:2013) IEC 27001 - Information Security Management Systems (ISMS) 8
K Risk Assessment Registry - ISO 27001 IEC 27001 - Information Security Management Systems (ISMS) 9
Richard Regalado ISO/IEC 27001:2016 Overview and Vocabulary - FREE! IEC 27001 - Information Security Management Systems (ISMS) 3
Richard Regalado ISO/IEC 27001 Mandatory Documentation Checklist IEC 27001 - Information Security Management Systems (ISMS) 1
P Recommended books on ISO 27001:2013 Implementation and Internal Auditing IEC 27001 - Information Security Management Systems (ISMS) 4
S Sample document for integrated ISO 20000 & ISO 27001 Other ISO and International Standards and European Regulations 3
W What are the benefits of ISO 27001 for my IT Organization IEC 27001 - Information Security Management Systems (ISMS) 3
S Clarification in organizing required documents for ISO 27001 IEC 27001 - Information Security Management Systems (ISMS) 6
A Risk Register template as per ISO 27001:2013 wanted IEC 27001 - Information Security Management Systems (ISMS) 9
Richard Regalado Sharing a Statement of Applicability (SOA) for ISO/IEC 27001:2013 IEC 27001 - Information Security Management Systems (ISMS) 2
S ISO 27001:2013 - How to document Context Of the Organization IEC 27001 - Information Security Management Systems (ISMS) 13
G ISO 27001 for a Hosting Provider IEC 27001 - Information Security Management Systems (ISMS) 3
P ISO 27001:2013 Clause 4.1 and 4.2 Clarification and Guidance IEC 27001 - Information Security Management Systems (ISMS) 13
W Working in a company where we try to implement ISO 27001 IEC 27001 - Information Security Management Systems (ISMS) 9
L Where to purchase ISO/IEC 27001:2013 IEC 27001 - Information Security Management Systems (ISMS) 3
L Implementing ISO 27001 A12.1.1 Security Requirements Analysis and Specification IEC 27001 - Information Security Management Systems (ISMS) 2
I ISO 27001:2013 Released - Transition Requirements? IEC 27001 - Information Security Management Systems (ISMS) 6
J ISO 27001 - Business Continuity Event Simulation Testing Business Continuity & Resiliency Planning (BCRP) 8
R Required artifacts (records) for ISO 27001 Auditing IEC 27001 - Information Security Management Systems (ISMS) 9
P What are the benefits of certified ISMS for ISO 27001 standard? IEC 27001 - Information Security Management Systems (ISMS) 3
Richard Regalado DRAFT ISO/IEC 27001:201? ISMS Requirements (Open for Comments!) IEC 27001 - Information Security Management Systems (ISMS) 0
R ISO 27001 A.8.2.2 Information Security Awareness, Education and Training IEC 27001 - Information Security Management Systems (ISMS) 10

Similar threads

Top Bottom