What is ISO 27001 certificate, required for government tender, cost

Let me share what happened to me; it might be useful. The answer varies greatly by industry; there is no one-size-fits-all rule.

Of course, it varies if your situation is different.

I've been dealing with this for a long time. Start with a small trial; don't commit to everything at once.

Hope this helps.

you're right.

Thanks a lot, I'll try it today. The answer varies greatly by industry; there is no one-size-fits-all rule.

Taking notes for two weeks yields better results than a six-month estimate. If I were you, I'd go this route.

Thanks for posting. When making a decision, first look at what data you have on hand.

Correct me if I'm wrong.

I'm curious too.

Absolutely. I mean if I were to add anything: When we decide without measuring, we always end up in the same place.

Everyone rushing into iso 27001 certificate gets stuck at the same point. If I were you I'd go this route.

Generally correct, but one part is missing... If the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

Trying to do this alone is the most expensive way. This is my opinion Im not claiming its absolute truth.

Noted, thanks.

I went through the same thing two years ago. Having backups accessible on the same network and with the same identity makes them part of the target.

If you post the result here, it will help others too.

There's also a measurement aspect to this. If you scold false alarms, nobody will report again.

If I were you I'd go this route.

Absolutely. If I were to add anything: If you scold false alarms, nobody will report again.

This is my opinion, I'm not claiming it's absolute truth.

I didn't know that. Taking measures without an inventory leaves doors you haven't seen open.

Hope this helps.

There's a trap here, let me mention it. When you try to change everything at once, nothing settles.

theres also a measurement aspect to this... the answer varies greatly by industry; there is no one-size-fits-all rule.

if I were you I'd go this route.

Good call starting this thread.

It's rare to find an explanation this clear.

Correct.