https://unixtime.com/https://unixtime.com/about/https://unixtime.com/author/https://unixtime.com/author/hassan-el-masri/https://unixtime.com/blog/https://unixtime.com/blog/archive/https://unixtime.com/blog/isaca-ai-governance-for-engineers/https://unixtime.com/blog/opensearch/https://unixtime.com/blog/page/1/https://unixtime.com/categories/https://unixtime.com/categories/cybersecurity/https://unixtime.com/categories/tech/https://unixtime.com/contact/https://unixtime.com/privacy/https://unixtime.com/research/https://unixtime.com/research/00-start-here/https://unixtime.com/research/01-fundamentals/access-control/https://unixtime.com/research/01-fundamentals/annex-a-and-the-statement-of-applicability/https://unixtime.com/research/01-fundamentals/control-attributes-and-risk-treatment-effects/https://unixtime.com/research/01-fundamentals/field-of-application-usage-and-compliance/https://unixtime.com/research/01-fundamentals/information-security-management-system/https://unixtime.com/research/01-fundamentals/information-security-policy/https://unixtime.com/research/01-fundamentals/internal-audit/https://unixtime.com/research/01-fundamentals/iso-27001-clauses-4-10-vs-annex-a/https://unixtime.com/research/01-fundamentals/iso27002-control-attributes/https://unixtime.com/research/01-fundamentals/management-responsibilities/https://unixtime.com/research/01-fundamentals/management-review/https://unixtime.com/research/01-fundamentals/risk-assessment/https://unixtime.com/research/01-fundamentals/roles-and-responsibilities/https://unixtime.com/research/01-fundamentals/segregation-of-duties/https://unixtime.com/research/01-fundamentals/statement-of-applicability/https://unixtime.com/research/01-iso-27001/clauses/iso27001-clause-4-context-of-the-organization/https://unixtime.com/research/01-iso-27001/clauses/iso27001-clause-5-leadership/https://unixtime.com/research/01-iso-27001/clauses/iso27001-clause-6-planning/https://unixtime.com/research/01-iso-27001/clauses/iso27001-clause-7-support/https://unixtime.com/research/01-iso-27001/clauses/iso27001-clause-8-operation/https://unixtime.com/research/01-iso-27001/clauses/iso27001-clause-9-performance-evaluation/https://unixtime.com/research/01-iso-27001/clauses/iso27001-clause-10-improvement/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-1-policies-for-information-security/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-2-information-security-roles-and-responsibilities/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-2-vs-a-5-4-comparison/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-3-segregation-of-duties/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-4-management-responsibilities/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-5-contact-with-authorities/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-6-contact-with-special-interest-groups/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-7-threat-intelligence/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-8-information-security-in-project-management/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-9-inventory-of-information-and-other-associated-assets/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-10-acceptable-use-of-information-and-other-associated-assets/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-11-return-of-assets/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-12-classification-of-information/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-13-labelling-of-information/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-14-information-transfer/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-15-access-control/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-16-identity-management/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-17-authentication-information/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-18-access-rights/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-19-information-security-in-supplier-relationships/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-20-addressing-information-security-within-supplier-agreements/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-21-managing-information-security-in-the-ict-supply-chain/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-22-monitoring-review-and-change-management-of-supplier-services/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-23-information-security-for-use-of-cloud-services/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-24-information-security-incident-management-planning-and-preparation/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-25-assessment-and-decision-on-information-security-events/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-26-response-to-information-security-incidents/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-27-learning-from-information-security-incidents/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-28-collection-of-evidence/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-29-information-security-during-disruption/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-30-ict-readiness-for-business-continuity/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-31-legal-statutory-regulatory-and-contractual-requirements/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-32-intellectual-property-rights/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-33-protection-of-records/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-34-privacy-and-protection-of-pii/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-35-independent-review-of-information-security/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-36-compliance-with-policies-rules-and-standards-for-information-security/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-37-documented-operating-procedures/https://unixtime.com/research/02-annex-a-organizational-controls/a-5-organizational-controls-moc/https://unixtime.com/research/03-annex-a-people-controls/a-6-1-screening/https://unixtime.com/research/03-annex-a-people-controls/a-6-2-terms-and-conditions-of-employment/https://unixtime.com/research/03-annex-a-people-controls/a-6-3-information-security-awareness-education-and-training/https://unixtime.com/research/03-annex-a-people-controls/a-6-4-disciplinary-process/https://unixtime.com/research/03-annex-a-people-controls/a-6-5-responsibilities-after-termination-or-change-of-employment/https://unixtime.com/research/03-annex-a-people-controls/a-6-6-confidentiality-or-non-disclosure-agreements/https://unixtime.com/research/03-annex-a-people-controls/a-6-7-remote-working/https://unixtime.com/research/03-annex-a-people-controls/a-6-8-information-security-event-reporting/https://unixtime.com/research/03-annex-a-people-controls/a-6-people-controls-moc/https://unixtime.com/research/03-exam-prep/common-exam-traps/https://unixtime.com/research/03-exam-prep/exam-cues/https://unixtime.com/research/03-exam-prep/quiz-review-control-attributes-and-compliance/https://unixtime.com/research/04-annex-a-physical-controls/a-7-1-physical-security-perimeters/https://unixtime.com/research/04-annex-a-physical-controls/a-7-2-physical-entry/https://unixtime.com/research/04-annex-a-physical-controls/a-7-3-securing-offices-rooms-and-facilities/https://unixtime.com/research/04-annex-a-physical-controls/a-7-4-physical-security-monitoring/https://unixtime.com/research/04-annex-a-physical-controls/a-7-5-protecting-against-physical-and-environmental-threats/https://unixtime.com/research/04-annex-a-physical-controls/a-7-6-working-in-secure-areas/https://unixtime.com/research/04-annex-a-physical-controls/a-7-7-clear-desk-and-clear-screen/https://unixtime.com/research/04-annex-a-physical-controls/a-7-8-equipment-siting-and-protection/https://unixtime.com/research/04-annex-a-physical-controls/a-7-9-security-of-assets-off-premises/https://unixtime.com/research/04-annex-a-physical-controls/a-7-10-storage-media/https://unixtime.com/research/04-annex-a-physical-controls/a-7-11-supporting-utilities/https://unixtime.com/research/04-annex-a-physical-controls/a-7-12-cabling-security/https://unixtime.com/research/04-annex-a-physical-controls/a-7-13-equipment-maintenance/https://unixtime.com/research/04-annex-a-physical-controls/a-7-14-secure-disposal-or-re-use-of-equipment/https://unixtime.com/research/04-annex-a-physical-controls/a-7-physical-controls-moc/https://unixtime.com/research/04-audit-evidence-packs/a-5-1-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-2-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-3-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-4-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-5-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-6-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-7-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-8-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-9-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-10-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-11-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-12-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-13-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-14-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-15-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-16-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-17-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-18-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-19-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-20-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-21-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-22-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-23-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-24-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-25-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-26-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-27-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-28-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-29-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-30-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-31-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-32-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-33-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-34-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-35-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-36-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-5-37-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-1-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-2-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-3-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-4-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-5-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-6-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-7-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-6-8-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-1-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-2-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-3-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-4-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-5-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-6-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-7-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-8-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-9-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-10-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-11-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-12-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-13-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-7-14-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-1-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-2-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-3-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-4-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-5-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-6-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-7-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-8-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-9-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-10-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-11-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-12-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-13-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-14-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-15-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-16-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-19-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-20-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-21-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-22-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-23-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-24-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-25-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-26-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-27-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-28-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-29-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-30-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-31-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-32-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-33-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/a-8-34-audit-evidence-pack/https://unixtime.com/research/04-audit-evidence-packs/audit-evidence-moc/https://unixtime.com/research/04-isms-artifacts/aq-0001-audit-question-threat-intelligence/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-1-policies-for-information-security/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-2-information-security-roles-and-responsibilities/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-3-segregation-of-duties/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-4-management-responsibilities/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-5-contact-with-authorities/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-6-contact-with-special-interest-groups/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-8-information-security-in-project-management/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-9-inventory-of-information-and-other-associated-assets/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-10-acceptable-use-of-information-and-other-associated-assets/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-11-return-of-assets/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-12-classification-of-information/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-13-labelling-of-information/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-14-information-transfer/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-15-access-control/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-16-identity-management/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-17-authentication-information/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-18-access-rights/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-19-information-security-in-supplier-relationships/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-20-addressing-information-security-within-supplier-agreements/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-21-managing-information-security-in-the-ict-supply-chain/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-22-monitoring-review-and-change-management-of-supplier-services/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-23-information-security-for-use-of-cloud-services/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-24-information-security-incident-management-planning-and-preparation/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-25-assessment-and-decision-on-information-security-events/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-26-response-to-information-security-incidents/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-27-learning-from-information-security-incidents/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-28-collection-of-evidence/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-29-information-security-during-disruption/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-30-ict-readiness-for-business-continuity/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-31-legal-statutory-regulatory-and-contractual-requirements/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-32-intellectual-property-rights/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-33-protection-of-records/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-34-privacy-and-protection-of-pii/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-35-independent-review-of-information-security/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-36-compliance-with-policies-rules-and-standards-for-information-security/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-5-37-documented-operating-procedures/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-1-screening/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-2-terms-and-conditions-of-employment/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-3-information-security-awareness-education-and-training/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-4-disciplinary-process/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-5-responsibilities-after-termination-or-change-of-employment/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-6-confidentiality-or-non-disclosure-agreements/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-7-remote-working/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-6-8-information-security-event-reporting/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-1-physical-security-perimeters/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-2-physical-entry/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-3-securing-offices-rooms-and-facilities/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-4-physical-security-monitoring/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-5-protecting-against-physical-and-environmental-threats/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-6-working-in-secure-areas/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-7-clear-desk-and-clear-screen/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-8-equipment-siting-and-protection/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-9-security-of-assets-off-premises/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-10-storage-media/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-11-supporting-utilities/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-12-cabling-security/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-13-equipment-maintenance/https://unixtime.com/research/04-isms-artifacts/aq-iso27001-a-7-14-secure-disposal-or-re-use-of-equipment/https://unixtime.com/research/05-annex-a-technological-controls/a-8-1-user-end-point-devices/https://unixtime.com/research/05-annex-a-technological-controls/a-8-2-privileged-access-rights/https://unixtime.com/research/05-annex-a-technological-controls/a-8-3-information-access-restriction/https://unixtime.com/research/05-annex-a-technological-controls/a-8-4-access-to-source-code/https://unixtime.com/research/05-annex-a-technological-controls/a-8-5-secure-authentication/https://unixtime.com/research/05-annex-a-technological-controls/a-8-6-capacity-management/https://unixtime.com/research/05-annex-a-technological-controls/a-8-7-protection-against-malware/https://unixtime.com/research/05-annex-a-technological-controls/a-8-8-management-of-technical-vulnerabilities/https://unixtime.com/research/05-annex-a-technological-controls/a-8-9-configuration-management/https://unixtime.com/research/05-annex-a-technological-controls/a-8-10-information-deletion/https://unixtime.com/research/05-annex-a-technological-controls/a-8-11-data-masking/https://unixtime.com/research/05-annex-a-technological-controls/a-8-12-data-leakage-prevention/https://unixtime.com/research/05-annex-a-technological-controls/a-8-13-information-backup/https://unixtime.com/research/05-annex-a-technological-controls/a-8-14-redundancy-of-information-processing-facilities/https://unixtime.com/research/05-annex-a-technological-controls/a-8-15-logging/https://unixtime.com/research/05-annex-a-technological-controls/a-8-16-monitoring-activities/https://unixtime.com/research/05-annex-a-technological-controls/a-8-19-installation-of-software-on-operational-systems/https://unixtime.com/research/05-annex-a-technological-controls/a-8-20-networks-security/https://unixtime.com/research/05-annex-a-technological-controls/a-8-21-security-of-network-services/https://unixtime.com/research/05-annex-a-technological-controls/a-8-22-segregation-of-networks/https://unixtime.com/research/05-annex-a-technological-controls/a-8-23-web-filtering/https://unixtime.com/research/05-annex-a-technological-controls/a-8-24-use-of-cryptography/https://unixtime.com/research/05-annex-a-technological-controls/a-8-25-secure-development-life-cycle/https://unixtime.com/research/05-annex-a-technological-controls/a-8-26-application-security-requirements/https://unixtime.com/research/05-annex-a-technological-controls/a-8-27-secure-system-architecture-and-engineering-principles/https://unixtime.com/research/05-annex-a-technological-controls/a-8-28-secure-coding/https://unixtime.com/research/05-annex-a-technological-controls/a-8-29-security-testing-in-development-and-acceptance/https://unixtime.com/research/05-annex-a-technological-controls/a-8-30-outsourced-development/https://unixtime.com/research/05-annex-a-technological-controls/a-8-31-separation-of-development-test-and-production-environments/https://unixtime.com/research/05-annex-a-technological-controls/a-8-32-change-management/https://unixtime.com/research/05-annex-a-technological-controls/a-8-33-test-information/https://unixtime.com/research/05-annex-a-technological-controls/a-8-34-protection-of-information-systems-during-audit-testing/https://unixtime.com/research/05-annex-a-technological-controls/a-8-technological-controls-moc/https://unixtime.com/research/05-implementer-guide/a-5-organizational-controls-implementation-guide/https://unixtime.com/research/05-implementer-guide/a-6-people-controls-implementation-guide/https://unixtime.com/research/05-implementer-guide/a-7-physical-controls-implementation-guide/https://unixtime.com/research/05-implementer-guide/a-8-technological-controls-implementation-guide/https://unixtime.com/research/05-implementer-guide/isms-implementation-roadmap/https://unixtime.com/research/05-implementer-guide/iso-27001-implementer-guide-moc/https://unixtime.com/research/05-risk-knowledge-base/risk-0001-customer-data-compromise-ransomware/https://unixtime.com/research/05-risk-knowledge-base/risk-0002-incident-escalation-failure/https://unixtime.com/research/05-risk-knowledge-base/risk-0003-security-event-misclassification/https://unixtime.com/research/05-risk-knowledge-base/risk-0004-uncoordinated-incident-response/https://unixtime.com/research/05-risk-knowledge-base/risk-0005-repeat-incident-without-lessons-learned/https://unixtime.com/research/05-risk-knowledge-base/risk-0006-evidence-integrity-loss/https://unixtime.com/research/05-risk-knowledge-base/risk-0007-excessive-access-to-sensitive-assets/https://unixtime.com/research/05-risk-knowledge-base/risk-0008-orphaned-identities-after-role-or-employment-change/https://unixtime.com/research/05-risk-knowledge-base/risk-0009-compromised-authentication-information/https://unixtime.com/research/05-risk-knowledge-base/risk-0010-stale-access-rights-after-business-change/https://unixtime.com/research/05-risk-knowledge-base/risk-0011-unmanaged-supplier-security-exposure/https://unixtime.com/research/05-risk-knowledge-base/risk-0012-supplier-access-before-security-requirements-are-agreed/https://unixtime.com/research/05-risk-knowledge-base/risk-0013-inherited-ict-supply-chain-compromise/https://unixtime.com/research/05-risk-knowledge-base/risk-0014-supplier-service-change-without-risk-review/https://unixtime.com/research/05-risk-knowledge-base/risk-0015-cloud-governance-and-exit-failure/https://unixtime.com/research/06-auditor-guide/a-5-organizational-controls-audit-guide/https://unixtime.com/research/06-auditor-guide/a-6-people-controls-audit-guide/https://unixtime.com/research/06-auditor-guide/a-7-physical-controls-audit-guide/https://unixtime.com/research/06-auditor-guide/a-8-technological-controls-audit-guide/https://unixtime.com/research/06-auditor-guide/internal-audit-execution-guide/https://unixtime.com/research/06-auditor-guide/iso-27001-auditor-guide-moc/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-1-policies-for-information-security/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-2-information-security-roles-and-responsibilities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-3-segregation-of-duties/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-4-management-responsibilities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-5-contact-with-authorities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-6-contact-with-special-interest-groups/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-7-threat-intelligence/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-8-information-security-in-project-management/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-9-inventory-of-information-and-other-associated-assets/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-10-acceptable-use-of-information-and-other-associated-assets/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-11-return-of-assets/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-12-classification-of-information/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-13-labelling-of-information/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-14-information-transfer/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-15-access-control/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-16-identity-management/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-17-authentication-information/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-18-access-rights/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-19-information-security-in-supplier-relationships/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-20-addressing-information-security-within-supplier-agreements/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-21-managing-information-security-in-the-ict-supply-chain/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-22-monitoring-review-and-change-management-of-supplier-services/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-23-information-security-for-use-of-cloud-services/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-24-information-security-incident-management-planning-and-preparation/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-25-assessment-and-decision-on-information-security-events/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-26-response-to-information-security-incidents/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-27-learning-from-information-security-incidents/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-28-collection-of-evidence/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-29-information-security-during-disruption/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-30-ict-readiness-for-business-continuity/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-31-legal-statutory-regulatory-and-contractual-requirements/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-32-intellectual-property-rights/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-33-protection-of-records/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-34-privacy-and-protection-of-pii/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-35-independent-review-of-information-security/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-36-compliance-with-policies-rules-and-standards-for-information-security/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-5-37-documented-operating-procedures/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-1-screening/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-2-terms-and-conditions-of-employment/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-3-information-security-awareness-education-and-training/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-4-disciplinary-process/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-5-responsibilities-after-termination-or-change-of-employment/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-6-confidentiality-or-non-disclosure-agreements/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-7-remote-working/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-6-8-information-security-event-reporting/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-1-physical-security-perimeters/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-2-physical-entry/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-3-securing-offices-rooms-and-facilities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-4-physical-security-monitoring/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-5-protecting-against-physical-and-environmental-threats/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-6-working-in-secure-areas/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-7-clear-desk-and-clear-screen/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-8-equipment-siting-and-protection/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-9-security-of-assets-off-premises/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-10-storage-media/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-11-supporting-utilities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-12-cabling-security/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-13-equipment-maintenance/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-7-14-secure-disposal-or-re-use-of-equipment/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-1-user-end-point-devices/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-2-privileged-access-rights/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-3-information-access-restriction/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-4-access-to-source-code/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-5-secure-authentication/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-6-capacity-management/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-7-protection-against-malware/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-8-management-of-technical-vulnerabilities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-9-configuration-management/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-10-information-deletion/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-11-data-masking/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-12-data-leakage-prevention/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-13-information-backup/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-14-redundancy-of-information-processing-facilities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-15-logging/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-16-monitoring-activities/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-19-installation-of-software-on-operational-systems/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-20-networks-security/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-21-security-of-network-services/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-22-segregation-of-networks/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-23-web-filtering/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-24-use-of-cryptography/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-25-secure-development-life-cycle/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-26-application-security-requirements/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-27-secure-system-architecture-and-engineering-principles/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-28-secure-coding/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-29-security-testing-in-development-and-acceptance/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-30-outsourced-development/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-31-separation-of-development-test-and-production-environments/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-32-change-management/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-33-test-information/https://unixtime.com/research/06-control-knowledge-base/iso27001-a-8-34-protection-of-information-systems-during-audit-testing/https://unixtime.com/research/07-evidence-library/evid-0001-monthly-threat-intelligence-review/https://unixtime.com/research/07-evidence-library/evid-0002-ioc-update-record/https://unixtime.com/research/07-evidence-library/evid-0003-siem-rule-update/https://unixtime.com/research/07-evidence-library/evid-0004-vendor-advisory-review/https://unixtime.com/research/07-iso-27005-risk-guide/iso-27005-risk-management-guide-moc/https://unixtime.com/research/07-iso-27005-risk-guide/iso-27005-risk-process-notes/https://unixtime.com/research/08-crosswalks/a-5-controls-implementation-audit-risk-mapping/https://unixtime.com/research/08-crosswalks/a-6-people-controls-implementation-audit-risk-mapping/https://unixtime.com/research/08-crosswalks/a-7-physical-controls-implementation-audit-risk-mapping/https://unixtime.com/research/08-crosswalks/a-8-technological-controls-implementation-audit-risk-mapping/https://unixtime.com/research/08-crosswalks/gdpr-iso-27001-engineering-crosswalk/https://unixtime.com/research/08-crosswalks/iso-27001-implementer-auditor-iso-27005-mapping/https://unixtime.com/research/09-exam-preparation/exam-001-clauses-4-10-vs-annex-a/https://unixtime.com/research/09-exam-preparation/exam-002-statement-of-applicability/https://unixtime.com/research/09-exam-preparation/exam-003-iso27002-control-attributes/https://unixtime.com/research/09-exam-preparation/exam-004-policy-vs-procedure-vs-standard/https://unixtime.com/research/09-exam-preparation/exam-005-responsibility-vs-accountability/https://unixtime.com/research/09-exam-preparation/exam-006-implementation-vs-audit-evidence/https://unixtime.com/research/09-exam-preparation/exam-007-preventive-detective-corrective-controls/https://unixtime.com/research/09-exam-preparation/exam-008-supplier-cloud-control-distinctions/https://unixtime.com/research/09-exam-preparation/exam-009-access-identity-authentication-rights/https://unixtime.com/research/09-exam-preparation/exam-010-incident-management-planning/https://unixtime.com/research/09-exam-preparation/exam-011-incident-management-lifecycle/https://unixtime.com/research/09-exam-preparation/exam-012-continuity-security-and-ict-readiness/https://unixtime.com/research/09-exam-preparation/exam-013-legal-ip-and-contractual-compliance/https://unixtime.com/research/09-exam-preparation/exam-014-records-privacy-and-pii/https://unixtime.com/research/09-exam-preparation/exam-015-assurance-compliance-and-operating-procedures/https://unixtime.com/research/09-exam-preparation/exam-016-people-controls-screening-and-terms/https://unixtime.com/research/09-exam-preparation/exam-017-awareness-education-and-training/https://unixtime.com/research/09-exam-preparation/exam-018-disciplinary-termination-and-confidentiality/https://unixtime.com/research/09-exam-preparation/exam-019-remote-working-and-event-reporting/https://unixtime.com/research/09-exam-preparation/exam-020-physical-perimeters-and-entry/https://unixtime.com/research/09-exam-preparation/exam-021-room-security-and-physical-monitoring/https://unixtime.com/research/09-exam-preparation/exam-022-environmental-secure-areas-and-clear-desk/https://unixtime.com/research/09-exam-preparation/exam-023-equipment-siting-and-protection/https://unixtime.com/research/09-exam-preparation/exam-024-off-premises-assets-and-storage-media/https://unixtime.com/research/09-exam-preparation/exam-025-supporting-utilities/https://unixtime.com/research/09-exam-preparation/exam-026-cabling-maintenance-and-equipment-disposal/https://unixtime.com/research/09-exam-preparation/exam-027-endpoint-and-privileged-access/https://unixtime.com/research/09-exam-preparation/exam-028-source-code-authentication-and-capacity/https://unixtime.com/research/09-exam-preparation/exam-029-malware-protection/https://unixtime.com/research/09-exam-preparation/exam-030-vulnerability-and-configuration-management/https://unixtime.com/research/09-exam-preparation/exam-031-deletion-and-data-masking/https://unixtime.com/research/09-exam-preparation/exam-032-dlp-and-backup/https://unixtime.com/research/09-exam-preparation/exam-033-redundancy-and-logging/https://unixtime.com/research/09-exam-preparation/exam-034-monitoring-activities/https://unixtime.com/research/09-exam-preparation/exam-035-software-installation-and-network-security/https://unixtime.com/research/09-exam-preparation/exam-036-network-services-segregation-and-web-filtering/https://unixtime.com/research/09-exam-preparation/exam-037-use-of-cryptography/https://unixtime.com/research/09-exam-preparation/exam-038-secure-development-and-architecture/https://unixtime.com/research/09-exam-preparation/exam-039-secure-coding-and-security-testing/https://unixtime.com/research/09-exam-preparation/exam-040-outsourced-development-and-environment-separation/https://unixtime.com/research/09-exam-preparation/exam-041-change-test-information-and-audit-testing/https://unixtime.com/research/10-iso-27001-knowledge-base/iso-27001-knowledge-base-moc/https://unixtime.com/research/10-iso-27001-knowledge-base/iso-27001-requirements-to-implementation-and-audit-map/https://unixtime.com/research/11-iso-27002-knowledge-base/iso-27002-annex-a-control-interpretation-map/https://unixtime.com/research/11-iso-27002-knowledge-base/iso-27002-control-attributes-evidence-map/https://unixtime.com/research/11-iso-27002-knowledge-base/iso-27002-knowledge-base-moc/https://unixtime.com/research/12-iso-27005-knowledge-base/iso-27005-knowledge-base-moc/https://unixtime.com/research/13-grc-knowledge-model/asset-threat-vulnerability-risk-control-evidence-data-model/https://unixtime.com/research/13-grc-knowledge-model/grc-knowledge-model-moc/https://unixtime.com/research/13-grc-knowledge-model/risk-knowledge-base-moc/https://unixtime.com/research/14-gdpr/gdpr-accountability-ropa-dpia-and-privacy-by-design/https://unixtime.com/research/14-gdpr/gdpr-lawful-bases-and-processing-principles/https://unixtime.com/research/14-gdpr/gdpr-processors-subprocessors-and-international-transfers/https://unixtime.com/research/14-gdpr/gdpr-scope-roles-and-operating-model/https://unixtime.com/research/14-gdpr/gdpr-security-and-personal-data-breach-response/https://unixtime.com/research/14-gdpr/gdpr-transparency-and-data-subject-rights/https://unixtime.com/research/90-templates/a-5-1-audit-checklist/https://unixtime.com/research/90-templates/a-5-2-audit-checklist/https://unixtime.com/research/90-templates/a-5-3-audit-checklist/https://unixtime.com/research/90-templates/a-5-4-audit-checklist/https://unixtime.com/research/90-templates/a-5-5-audit-checklist/https://unixtime.com/research/90-templates/a-5-6-audit-checklist/https://unixtime.com/research/90-templates/a-5-7-audit-checklist/https://unixtime.com/research/90-templates/a-5-8-audit-checklist/https://unixtime.com/research/90-templates/a-5-9-audit-checklist/https://unixtime.com/research/90-templates/a-5-10-audit-checklist/https://unixtime.com/research/90-templates/a-5-11-audit-checklist/https://unixtime.com/research/90-templates/a-5-12-audit-checklist/https://unixtime.com/research/90-templates/a-5-13-audit-checklist/https://unixtime.com/research/90-templates/a-5-14-audit-checklist/https://unixtime.com/research/90-templates/a-5-15-audit-checklist/https://unixtime.com/research/90-templates/a-5-16-audit-checklist/https://unixtime.com/research/90-templates/a-5-17-audit-checklist/https://unixtime.com/research/90-templates/a-5-18-audit-checklist/https://unixtime.com/research/90-templates/a-5-19-audit-checklist/https://unixtime.com/research/90-templates/a-5-20-audit-checklist/https://unixtime.com/research/90-templates/a-5-21-audit-checklist/https://unixtime.com/research/90-templates/a-5-22-audit-checklist/https://unixtime.com/research/90-templates/a-5-23-audit-checklist/https://unixtime.com/research/90-templates/a-5-24-audit-checklist/https://unixtime.com/research/90-templates/a-5-25-audit-checklist/https://unixtime.com/research/90-templates/a-5-26-audit-checklist/https://unixtime.com/research/90-templates/a-5-27-audit-checklist/https://unixtime.com/research/90-templates/a-5-28-audit-checklist/https://unixtime.com/research/90-templates/a-5-29-audit-checklist/https://unixtime.com/research/90-templates/a-5-30-audit-checklist/https://unixtime.com/research/90-templates/a-5-31-audit-checklist/https://unixtime.com/research/90-templates/a-5-32-audit-checklist/https://unixtime.com/research/90-templates/a-5-33-audit-checklist/https://unixtime.com/research/90-templates/a-5-34-audit-checklist/https://unixtime.com/research/90-templates/a-5-35-audit-checklist/https://unixtime.com/research/90-templates/a-5-36-audit-checklist/https://unixtime.com/research/90-templates/a-5-37-audit-checklist/https://unixtime.com/research/90-templates/a-6-1-audit-checklist/https://unixtime.com/research/90-templates/a-6-2-audit-checklist/https://unixtime.com/research/90-templates/a-6-3-audit-checklist/https://unixtime.com/research/90-templates/a-6-4-audit-checklist/https://unixtime.com/research/90-templates/a-6-5-audit-checklist/https://unixtime.com/research/90-templates/a-6-6-audit-checklist/https://unixtime.com/research/90-templates/a-6-7-audit-checklist/https://unixtime.com/research/90-templates/a-6-8-audit-checklist/https://unixtime.com/research/90-templates/a-7-1-audit-checklist/https://unixtime.com/research/90-templates/a-7-2-audit-checklist/https://unixtime.com/research/90-templates/a-7-3-audit-checklist/https://unixtime.com/research/90-templates/a-7-4-audit-checklist/https://unixtime.com/research/90-templates/a-7-5-audit-checklist/https://unixtime.com/research/90-templates/a-7-6-audit-checklist/https://unixtime.com/research/90-templates/a-7-7-audit-checklist/https://unixtime.com/research/90-templates/a-7-8-audit-checklist/https://unixtime.com/research/90-templates/a-7-9-audit-checklist/https://unixtime.com/research/90-templates/a-7-10-audit-checklist/https://unixtime.com/research/90-templates/a-7-11-audit-checklist/https://unixtime.com/research/90-templates/a-7-12-audit-checklist/https://unixtime.com/research/90-templates/a-7-13-audit-checklist/https://unixtime.com/research/90-templates/a-7-14-audit-checklist/https://unixtime.com/research/90-templates/a-8-1-audit-checklist/https://unixtime.com/research/90-templates/a-8-2-audit-checklist/https://unixtime.com/research/90-templates/a-8-3-audit-checklist/https://unixtime.com/research/90-templates/a-8-4-audit-checklist/https://unixtime.com/research/90-templates/a-8-5-audit-checklist/https://unixtime.com/research/90-templates/a-8-6-audit-checklist/https://unixtime.com/research/90-templates/a-8-7-audit-checklist/https://unixtime.com/research/90-templates/a-8-8-audit-checklist/https://unixtime.com/research/90-templates/a-8-9-audit-checklist/https://unixtime.com/research/90-templates/a-8-10-audit-checklist/https://unixtime.com/research/90-templates/a-8-11-audit-checklist/https://unixtime.com/research/90-templates/a-8-12-audit-checklist/https://unixtime.com/research/90-templates/a-8-13-audit-checklist/https://unixtime.com/research/90-templates/a-8-14-audit-checklist/https://unixtime.com/research/90-templates/a-8-15-audit-checklist/https://unixtime.com/research/90-templates/a-8-16-audit-checklist/https://unixtime.com/research/90-templates/a-8-19-audit-checklist/https://unixtime.com/research/90-templates/a-8-20-audit-checklist/https://unixtime.com/research/90-templates/a-8-21-audit-checklist/https://unixtime.com/research/90-templates/a-8-22-audit-checklist/https://unixtime.com/research/90-templates/a-8-23-audit-checklist/https://unixtime.com/research/90-templates/a-8-24-audit-checklist/https://unixtime.com/research/90-templates/a-8-25-audit-checklist/https://unixtime.com/research/90-templates/a-8-26-audit-checklist/https://unixtime.com/research/90-templates/a-8-27-audit-checklist/https://unixtime.com/research/90-templates/a-8-28-audit-checklist/https://unixtime.com/research/90-templates/a-8-29-audit-checklist/https://unixtime.com/research/90-templates/a-8-30-audit-checklist/https://unixtime.com/research/90-templates/a-8-31-audit-checklist/https://unixtime.com/research/90-templates/a-8-32-audit-checklist/https://unixtime.com/research/90-templates/a-8-33-audit-checklist/https://unixtime.com/research/90-templates/a-8-34-audit-checklist/https://unixtime.com/research/90-templates/acceptable-use-and-information-handling-rules/https://unixtime.com/research/90-templates/access-control-matrix/https://unixtime.com/research/90-templates/access-review-checklist/https://unixtime.com/research/90-templates/access-rights-request-and-review-register/https://unixtime.com/research/90-templates/ai-generated-code-security-review-checklist/https://unixtime.com/research/90-templates/ai-generated-content-ip-review-checklist/https://unixtime.com/research/90-templates/application-security-requirements-approval-record/https://unixtime.com/research/90-templates/application-security-requirements-register/https://unixtime.com/research/90-templates/application-transaction-security-checklist/https://unixtime.com/research/90-templates/approved-sensitive-data-flow-register/https://unixtime.com/research/90-templates/asset-return-checklist/https://unixtime.com/research/90-templates/audit-testing-plan-and-authorization-record/https://unixtime.com/research/90-templates/audit-tool-validation-record/https://unixtime.com/research/90-templates/authentication-exception-and-compensating-control-record/https://unixtime.com/research/90-templates/authentication-information-handling-standard/https://unixtime.com/research/90-templates/authentication-mechanism-review-checklist/https://unixtime.com/research/90-templates/authority-contact-register/https://unixtime.com/research/90-templates/availability-requirement-mapping/https://unixtime.com/research/90-templates/background-verification-checklist/https://unixtime.com/research/90-templates/backup-and-restore-test-record/https://unixtime.com/research/90-templates/backup-policy-and-schedule/https://unixtime.com/research/90-templates/backup-scope-and-coverage-register/https://unixtime.com/research/90-templates/building-management-system-security-review/https://unixtime.com/research/90-templates/cabling-inspection-checklist/https://unixtime.com/research/90-templates/cabling-route-and-protection-register/https://unixtime.com/research/90-templates/capacity-management-plan/https://unixtime.com/research/90-templates/capacity-monitoring-and-forecast-register/https://unixtime.com/research/90-templates/certificate-authority-and-certificate-review/https://unixtime.com/research/90-templates/change-management-procedure/https://unixtime.com/research/90-templates/change-request-and-security-impact-assessment/https://unixtime.com/research/90-templates/clear-desk-and-clear-screen-checklist/https://unixtime.com/research/90-templates/cloud-and-backup-deletion-checklist/https://unixtime.com/research/90-templates/cloud-security-requirements-and-exit-checklist/https://unixtime.com/research/90-templates/cloud-service-register/https://unixtime.com/research/90-templates/confidentiality-agreement-register/https://unixtime.com/research/90-templates/confidentiality-agreement-review-checklist/https://unixtime.com/research/90-templates/configuration-baseline-register/https://unixtime.com/research/90-templates/configuration-compliance-review-checklist/https://unixtime.com/research/90-templates/configuration-drift-alert-review-record/https://unixtime.com/research/90-templates/configuration-exception-and-risk-acceptance-record/https://unixtime.com/research/90-templates/control-attribute-review/https://unixtime.com/research/90-templates/control-balance-analysis/https://unixtime.com/research/90-templates/control-owner-register/https://unixtime.com/research/90-templates/corrective-action-tracker/https://unixtime.com/research/90-templates/critical-system-capacity-review-checklist/https://unixtime.com/research/90-templates/cryptographic-controls-policy/https://unixtime.com/research/90-templates/cryptographic-key-management-register/https://unixtime.com/research/90-templates/cryptographic-legal-requirements-assessment/https://unixtime.com/research/90-templates/cryptographic-use-case-and-algorithm-register/https://unixtime.com/research/90-templates/damaged-media-handling-decision-record/https://unixtime.com/research/90-templates/data-masking-decision-register/https://unixtime.com/research/90-templates/data-masking-standard/https://unixtime.com/research/90-templates/delivery-and-loading-area-security-checklist/https://unixtime.com/research/90-templates/developer-security-training-matrix/https://unixtime.com/research/90-templates/development-environment-separation-standard/https://unixtime.com/research/90-templates/development-test-production-separation-checklist/https://unixtime.com/research/90-templates/development-tool-and-library-integrity-checklist/https://unixtime.com/research/90-templates/disciplinary-process-checklist/https://unixtime.com/research/90-templates/dlp-alert-review-and-tuning-log/https://unixtime.com/research/90-templates/dlp-scope-and-rule-register/https://unixtime.com/research/90-templates/dynamic-privilege-session-record/https://unixtime.com/research/90-templates/emergency-change-record/https://unixtime.com/research/90-templates/emergency-privileged-access-record/https://unixtime.com/research/90-templates/endpoint-device-inventory-and-compliance-register/https://unixtime.com/research/90-templates/endpoint-device-security-standard/https://unixtime.com/research/90-templates/endpoint-loss-or-theft-response-checklist/https://unixtime.com/research/90-templates/environmental-protection-inspection-checklist/https://unixtime.com/research/90-templates/equipment-disposal-and-reuse-register/https://unixtime.com/research/90-templates/equipment-maintenance-register/https://unixtime.com/research/90-templates/equipment-protection-inspection-checklist/https://unixtime.com/research/90-templates/equipment-sanitization-verification-checklist/https://unixtime.com/research/90-templates/equipment-siting-and-protection-assessment/https://unixtime.com/research/90-templates/event-triage-and-incident-classification-register/https://unixtime.com/research/90-templates/evidence-collection-and-chain-of-custody-log/https://unixtime.com/research/90-templates/evidence-request-list/https://unixtime.com/research/90-templates/ict-continuity-requirements-and-test-record/https://unixtime.com/research/90-templates/ict-supply-chain-risk-register/https://unixtime.com/research/90-templates/identity-lifecycle-register/https://unixtime.com/research/90-templates/incident-lessons-learned-register/https://unixtime.com/research/90-templates/incident-management-plan/https://unixtime.com/research/90-templates/incident-response-record/https://unixtime.com/research/90-templates/incident-roles-and-communications-matrix/https://unixtime.com/research/90-templates/independent-information-security-review-plan-and-report/https://unixtime.com/research/90-templates/information-access-restriction-review-checklist/https://unixtime.com/research/90-templates/information-access-rule-matrix/https://unixtime.com/research/90-templates/information-and-associated-asset-inventory/https://unixtime.com/research/90-templates/information-classification-and-handling-matrix/https://unixtime.com/research/90-templates/information-deletion-and-destruction-register/https://unixtime.com/research/90-templates/information-retention-and-deletion-rules/https://unixtime.com/research/90-templates/information-security-continuity-requirements/https://unixtime.com/research/90-templates/information-security-event-report-form/https://unixtime.com/research/90-templates/information-security-event-reporting-channel-register/https://unixtime.com/research/90-templates/information-security-role-definition/https://unixtime.com/research/90-templates/information-transfer-rules-matrix/https://unixtime.com/research/90-templates/intellectual-property-rights-register/https://unixtime.com/research/90-templates/internal-audit-interview-question-bank/https://unixtime.com/research/90-templates/key-escrow-and-emergency-recovery-checklist/https://unixtime.com/research/90-templates/leaver-and-role-change-security-checklist/https://unixtime.com/research/90-templates/legal-and-contractual-requirements-register/https://unixtime.com/research/90-templates/log-integrity-and-access-review-checklist/https://unixtime.com/research/90-templates/log-review-and-alert-triage-record/https://unixtime.com/research/90-templates/log-source-and-retention-register/https://unixtime.com/research/90-templates/logging-and-monitoring-standard/https://unixtime.com/research/90-templates/long-term-archive-recoverability-checklist/https://unixtime.com/research/90-templates/long-term-asset-loan-attestation/https://unixtime.com/research/90-templates/maintenance-access-and-tamper-check-record/https://unixtime.com/research/90-templates/malware-awareness-checklist/https://unixtime.com/research/90-templates/malware-infection-response-record/https://unixtime.com/research/90-templates/malware-protection-coverage-and-update-register/https://unixtime.com/research/90-templates/malware-protection-standard/https://unixtime.com/research/90-templates/management-responsibilities-interview-questions/https://unixtime.com/research/90-templates/management-review-input-checklist/https://unixtime.com/research/90-templates/management-security-responsibilities-checklist/https://unixtime.com/research/90-templates/manager-security-accountability-statement/https://unixtime.com/research/90-templates/monitoring-alert-threshold-review/https://unixtime.com/research/90-templates/monitoring-coverage-and-data-source-map/https://unixtime.com/research/90-templates/monitoring-detection-use-case-register/https://unixtime.com/research/90-templates/network-device-configuration-and-change-review/https://unixtime.com/research/90-templates/network-monitoring-and-corrective-action-register/https://unixtime.com/research/90-templates/network-security-architecture-and-zoning-standard/https://unixtime.com/research/90-templates/network-segmentation-test-checklist/https://unixtime.com/research/90-templates/network-service-provider-review-checklist/https://unixtime.com/research/90-templates/network-service-security-requirements-register/https://unixtime.com/research/90-templates/network-service-sla-and-security-feature-review/https://unixtime.com/research/90-templates/network-zone-and-connection-matrix/https://unixtime.com/research/90-templates/off-premises-asset-authorization-register/https://unixtime.com/research/90-templates/off-premises-asset-protection-checklist/https://unixtime.com/research/90-templates/office-room-and-facility-security-assessment/https://unixtime.com/research/90-templates/operating-procedure-register/https://unixtime.com/research/90-templates/operating-procedure-review-and-change-checklist/https://unixtime.com/research/90-templates/operational-software-installation-procedure/https://unixtime.com/research/90-templates/operational-software-release-and-installation-record/https://unixtime.com/research/90-templates/out-of-hours-monitoring-escalation-checklist/https://unixtime.com/research/90-templates/outsourced-development-review-register/https://unixtime.com/research/90-templates/outsourced-development-security-requirements-checklist/https://unixtime.com/research/90-templates/patch-testing-and-rollback-checklist/https://unixtime.com/research/90-templates/personnel-screening-register/https://unixtime.com/research/90-templates/personnel-security-responsibility-acknowledgement/https://unixtime.com/research/90-templates/physical-and-environmental-threat-assessment/https://unixtime.com/research/90-templates/physical-entry-access-review/https://unixtime.com/research/90-templates/physical-security-alarm-test-record/https://unixtime.com/research/90-templates/physical-security-false-alarm-register/https://unixtime.com/research/90-templates/physical-security-monitoring-procedure/https://unixtime.com/research/90-templates/physical-security-perimeter-review-checklist/https://unixtime.com/research/90-templates/physical-security-zone-register/https://unixtime.com/research/90-templates/pii-handling-and-access-review-checklist/https://unixtime.com/research/90-templates/pii-inventory-and-privacy-requirements-matrix/https://unixtime.com/research/90-templates/policy-and-technical-compliance-review-register/https://unixtime.com/research/90-templates/policy-communication-and-acknowledgement-tracker/https://unixtime.com/research/90-templates/policy-register/https://unixtime.com/research/90-templates/policy-review-checklist/https://unixtime.com/research/90-templates/policy-violation-and-disciplinary-action-register/https://unixtime.com/research/90-templates/post-employment-security-responsibilities-register/https://unixtime.com/research/90-templates/printer-and-fax-security-checklist/https://unixtime.com/research/90-templates/privacy-breach-notification-readiness-checklist/https://unixtime.com/research/90-templates/privileged-access-register/https://unixtime.com/research/90-templates/privileged-access-review-checklist/https://unixtime.com/research/90-templates/privileged-activity-log-review-checklist/https://unixtime.com/research/90-templates/project-security-requirements-register/https://unixtime.com/research/90-templates/raci-matrix/https://unixtime.com/research/90-templates/re-identification-risk-assessment/https://unixtime.com/research/90-templates/records-inventory-review-checklist/https://unixtime.com/research/90-templates/records-retention-and-protection-register/https://unixtime.com/research/90-templates/redundancy-failover-test-record/https://unixtime.com/research/90-templates/redundancy-requirements-and-architecture-register/https://unixtime.com/research/90-templates/release-and-rollback-plan/https://unixtime.com/research/90-templates/remote-access-and-endpoint-connection-checklist/https://unixtime.com/research/90-templates/remote-equipment-register/https://unixtime.com/research/90-templates/remote-working-authorization-register/https://unixtime.com/research/90-templates/remote-working-risk-assessment/https://unixtime.com/research/90-templates/remote-working-security-checklist/https://unixtime.com/research/90-templates/repair-dispatch-data-protection-checklist/https://unixtime.com/research/90-templates/risk-and-control-mapping-table/https://unixtime.com/research/90-templates/role-and-responsibility-interview-questions/https://unixtime.com/research/90-templates/role-based-security-training-matrix/https://unixtime.com/research/90-templates/secure-architecture-principles-standard/https://unixtime.com/research/90-templates/secure-area-access-register/https://unixtime.com/research/90-templates/secure-area-work-authorization-register/https://unixtime.com/research/90-templates/secure-area-working-procedure/https://unixtime.com/research/90-templates/secure-authentication-standard/https://unixtime.com/research/90-templates/secure-code-review-record/https://unixtime.com/research/90-templates/secure-coding-compliance-review-checklist/https://unixtime.com/research/90-templates/secure-coding-exception-record/https://unixtime.com/research/90-templates/secure-coding-standard/https://unixtime.com/research/90-templates/secure-development-compliance-review-checklist/https://unixtime.com/research/90-templates/secure-development-policy/https://unixtime.com/research/90-templates/secure-media-disposal-and-destruction-register/https://unixtime.com/research/90-templates/security-acceptance-criteria-checklist/https://unixtime.com/research/90-templates/security-acceptance-sign-off-record/https://unixtime.com/research/90-templates/security-architecture-review-record/https://unixtime.com/research/90-templates/security-awareness-and-training-plan/https://unixtime.com/research/90-templates/security-engineering-deviation-record/https://unixtime.com/research/90-templates/security-responsibilities-addendum/https://unixtime.com/research/90-templates/security-terms-and-conditions-checklist/https://unixtime.com/research/90-templates/security-test-plan/https://unixtime.com/research/90-templates/security-test-results-and-remediation-tracker/https://unixtime.com/research/90-templates/security-training-record/https://unixtime.com/research/90-templates/segregation-of-duties-matrix/https://unixtime.com/research/90-templates/sensitive-data-transfer-approval-record/https://unixtime.com/research/90-templates/sensitive-function-and-export-control-checklist/https://unixtime.com/research/90-templates/sensitive-room-signage-and-directory-review/https://unixtime.com/research/90-templates/sod-exception-record/https://unixtime.com/research/90-templates/software-and-content-licence-compliance-inventory/https://unixtime.com/research/90-templates/software-licence-and-support-verification-checklist/https://unixtime.com/research/90-templates/software-rollback-and-fallback-checklist/https://unixtime.com/research/90-templates/source-code-access-register/https://unixtime.com/research/90-templates/source-code-change-control-checklist/https://unixtime.com/research/90-templates/special-interest-group-participation-register/https://unixtime.com/research/90-templates/statement-of-applicability-support-table/https://unixtime.com/research/90-templates/storage-media-handling-procedure/https://unixtime.com/research/90-templates/storage-media-movement-log/https://unixtime.com/research/90-templates/supplier-development-evidence-request-list/https://unixtime.com/research/90-templates/supplier-security-agreement-requirements-checklist/https://unixtime.com/research/90-templates/supplier-security-register/https://unixtime.com/research/90-templates/supplier-security-responsibility-matrix/https://unixtime.com/research/90-templates/supplier-security-risk-assessment/https://unixtime.com/research/90-templates/supplier-service-review-and-change-log/https://unixtime.com/research/90-templates/supporting-utility-dependency-register/https://unixtime.com/research/90-templates/supporting-utility-inspection-and-test-log/https://unixtime.com/research/90-templates/technical-compliance-review-plan/https://unixtime.com/research/90-templates/template-clause-note/https://unixtime.com/research/90-templates/template-control-card/https://unixtime.com/research/90-templates/template-evidence-item/https://unixtime.com/research/90-templates/template-risk-scenario/https://unixtime.com/research/90-templates/template-weekly-review/https://unixtime.com/research/90-templates/test-data-protection-checklist/https://unixtime.com/research/90-templates/test-data-security-approval-record/https://unixtime.com/research/90-templates/test-information-management-register/https://unixtime.com/research/90-templates/third-party-information-transfer-agreement-checklist/https://unixtime.com/research/90-templates/threat-intelligence-register/https://unixtime.com/research/90-templates/top-level-information-security-policy/https://unixtime.com/research/90-templates/ups-and-generator-capacity-test-record/https://unixtime.com/research/90-templates/virtual-network-and-hypervisor-security-review/https://unixtime.com/research/90-templates/visitor-access-log/https://unixtime.com/research/90-templates/vulnerability-exception-and-risk-acceptance-record/https://unixtime.com/research/90-templates/vulnerability-management-procedure/https://unixtime.com/research/90-templates/vulnerability-register-and-remediation-tracker/https://unixtime.com/research/90-templates/web-filtering-coverage-review/https://unixtime.com/research/90-templates/web-filtering-exception-register/https://unixtime.com/research/90-templates/web-filtering-policy-and-category-matrix/https://unixtime.com/research/90-templates/wireless-network-security-assessment/https://unixtime.com/research/99-indexes/annex-a-controls-moc/https://unixtime.com/research/99-indexes/audit-evidence-index/https://unixtime.com/research/99-indexes/exam-cues-index/https://unixtime.com/research/99-indexes/iso-27001-overview/https://unixtime.com/research/99-indexes/templates-moc/https://unixtime.com/research/99-templates/template-audit-question/https://unixtime.com/research/99-templates/template-clause-note/https://unixtime.com/research/99-templates/template-control-card/https://unixtime.com/research/99-templates/template-evidence-item/https://unixtime.com/research/99-templates/template-exam-topic/https://unixtime.com/research/99-templates/template-risk-scenario/https://unixtime.com/research/archive/https://unixtime.com/research/gdpr/https://unixtime.com/research/gdpr/accountability-and-governance/https://unixtime.com/research/gdpr/lawful-processing/https://unixtime.com/research/gdpr/processors-and-transfers/https://unixtime.com/research/gdpr/rights-and-transparency/https://unixtime.com/research/gdpr/scope-and-roles/https://unixtime.com/research/gdpr/security-and-breaches/https://unixtime.com/research/iso27001/https://unixtime.com/research/iso27001/annex-a-organizational-controls/https://unixtime.com/research/iso27001/annex-a-people-controls/https://unixtime.com/research/iso27001/annex-a-physical-controls/https://unixtime.com/research/iso27001/audit-evidence/https://unixtime.com/research/iso27001/clauses/https://unixtime.com/research/iso27001/exam-preparation/https://unixtime.com/research/iso27001/implementation-guides/https://unixtime.com/research/iso27001/overview/https://unixtime.com/research/iso27001/risk-crosswalks/https://unixtime.com/research/iso27002/https://unixtime.com/research/iso27002/control-interpretation/https://unixtime.com/research/iso27002/crosswalks/https://unixtime.com/research/iso27002/overview/https://unixtime.com/research/iso27002/templates-evidence/https://unixtime.com/research/iso27005/https://unixtime.com/research/iso27005/iso27001-links/https://unixtime.com/research/iso27005/risk-process/https://unixtime.com/research/iso27005/risk-scenarios/https://unixtime.com/tags/https://unixtime.com/tags/ai-governance/https://unixtime.com/tags/ai/https://unixtime.com/tags/cobit/https://unixtime.com/tags/isaca/https://unixtime.com/tags/iso-27001/https://unixtime.com/tags/observability/https://unixtime.com/tags/opensearch/https://unixtime.com/tags/risk-management/https://unixtime.com/tags/search/https://unixtime.com/tags/security/https://unixtime.com/tree/