-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathiso27001.html
More file actions
163 lines (153 loc) · 9.42 KB
/
Copy pathiso27001.html
File metadata and controls
163 lines (153 loc) · 9.42 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Phixon — ISO 27001 Documentation</title>
<link rel="icon" type="image/x-icon" href="icon.ico">
<style>
:root{
--black:#0a0908;
--gold:#c9a24a;
--gold-bright:#e6c878;
--gold-dim:#7a6430;
--ink:#e8e2d0;
--ink-dim:#8a8474;
--line:rgba(201,162,74,0.18);
--mono: 'JetBrains Mono', 'Consolas', monospace;
--serif: 'Cormorant Garamond', 'Times New Roman', serif;
}
@import url('https://fonts.googleapis.com/css2?family=Cormorant+Garamond:wght@400;500;600;700&family=JetBrains+Mono:wght@300;400;500;700&display=swap');
*{margin:0;padding:0;box-sizing:border-box;}
html{scroll-behavior:smooth;}
body{background:var(--black);color:var(--ink);font-family:var(--mono);overflow-x:hidden;}
::selection{background:var(--gold);color:var(--black);}
main{position:relative;z-index:10;}
.wrap{max-width:1000px;margin:0 auto;padding:0 40px;}
nav{position:sticky;top:0;z-index:50;background:rgba(10,9,8,0.88);backdrop-filter:blur(10px);border-bottom:1px solid var(--line);}
nav .wrap{display:flex;align-items:center;justify-content:space-between;height:64px;max-width:1000px;}
.brand{font-family:var(--serif);font-weight:700;font-size:20px;letter-spacing:4px;color:var(--gold-bright);text-decoration:none;}
.brand span{color:var(--gold-dim);}
.navlinks a{color:var(--ink-dim);text-decoration:none;font-size:12px;letter-spacing:1.5px;}
.navlinks a:hover{color:var(--gold-bright);}
.hero{padding:100px 0 60px;}
.eyebrow{font-size:11px;letter-spacing:5px;color:var(--gold-dim);text-transform:uppercase;margin-bottom:18px;}
h1{font-family:var(--serif);font-weight:600;font-size:clamp(32px,5vw,52px);color:var(--ink);letter-spacing:1px;margin-bottom:20px;}
h1 em{color:var(--gold-bright);font-style:normal;}
.lede{font-family:var(--serif);font-size:19px;line-height:1.7;color:var(--ink-dim);max-width:640px;}
section{padding:60px 0;border-top:1px solid var(--line);}
.section-eyebrow{font-size:11px;letter-spacing:5px;color:var(--gold-dim);text-transform:uppercase;margin-bottom:8px;}
h2{font-family:var(--serif);font-weight:600;font-size:clamp(26px,3.5vw,36px);color:var(--gold-bright);letter-spacing:1px;margin-bottom:8px;}
.section-note{font-size:13px;color:var(--ink-dim);margin-bottom:40px;max-width:600px;line-height:1.7;}
table{width:100%;border-collapse:collapse;margin-top:10px;}
thead th{
text-align:left;
font-size:11px;
letter-spacing:2px;
color:var(--gold-dim);
text-transform:uppercase;
padding:12px 0;
border-bottom:1px solid var(--line);
}
thead th.clause-col{width:220px;}
tbody td{
padding:18px 0;
border-bottom:1px solid var(--line);
vertical-align:top;
}
tbody tr:last-child td{border-bottom:none;}
.doc-name{font-family:var(--serif);font-size:18px;color:var(--ink);font-weight:600;}
.doc-clause{font-size:12.5px;color:var(--gold-dim);letter-spacing:.5px;}
footer{border-top:1px solid var(--line);padding:30px 0;font-size:11px;color:var(--gold-dim);letter-spacing:2px;text-align:center;margin-top:20px;}
@media(max-width:640px){
table, thead, tbody, th, td, tr{display:block;}
thead{display:none;}
tbody td{border-bottom:none;padding:4px 0;}
tbody tr{padding:18px 0;border-bottom:1px solid var(--line);}
}
</style>
</head>
<body>
<main>
<nav>
<div class="wrap">
<a class="brand" href="index.html">PHIX<span>ON</span></a>
<div class="navlinks"><a href="index.html">← Back</a></div>
</div>
</nav>
<div class="hero">
<div class="wrap">
<div class="eyebrow">Compliance</div>
<h1>ISO 27001 <em>Documentation</em></h1>
<p class="lede">Every document an ISMS needs to pass certification — split into what the standard requires, and what strengthens it. Clause references follow ISO/IEC 27001:2022.</p>
</div>
</div>
<section id="mandatory">
<div class="wrap">
<div class="section-eyebrow">Section 1</div>
<h2>Mandatory Documents</h2>
<p class="section-note">Required for certification. An auditor will ask for each of these by name.</p>
<table>
<thead><tr><th>Document</th><th class="clause-col">Clause / Control</th></tr></thead>
<tbody>
<tr><td class="doc-name">Scope of the ISMS</td><td class="doc-clause">Clause 4.3</td></tr>
<tr><td class="doc-name">Information Security Policy</td><td class="doc-clause">Clause 5.2</td></tr>
<tr><td class="doc-name">Risk Assessment & Risk Treatment Methodology</td><td class="doc-clause">Clause 6.1.2</td></tr>
<tr><td class="doc-name">Statement of Applicability (SoA)</td><td class="doc-clause">Clause 6.1.3 (d)</td></tr>
<tr><td class="doc-name">Risk Treatment Plan</td><td class="doc-clause">Clause 6.1.3 (e) / 6.2</td></tr>
<tr><td class="doc-name">Information Security Objectives</td><td class="doc-clause">Clause 6.2</td></tr>
<tr><td class="doc-name">Risk Assessment Report</td><td class="doc-clause">Clause 8.2</td></tr>
<tr><td class="doc-name">Definition of Security Roles & Responsibilities</td><td class="doc-clause">Clause 5.3 / Annex A 5.2</td></tr>
<tr><td class="doc-name">Inventory of Assets</td><td class="doc-clause">Annex A 5.9</td></tr>
<tr><td class="doc-name">Acceptable Use of Assets Policy</td><td class="doc-clause">Annex A 5.10</td></tr>
<tr><td class="doc-name">Access Control Policy</td><td class="doc-clause">Annex A 5.15</td></tr>
<tr><td class="doc-name">Operating Procedures for IT Management</td><td class="doc-clause">Annex A 5.37</td></tr>
<tr><td class="doc-name">Secure System Engineering Principles</td><td class="doc-clause">Annex A 8.27</td></tr>
<tr><td class="doc-name">Supplier Security Policy</td><td class="doc-clause">Annex A 5.19</td></tr>
<tr><td class="doc-name">Incident Management Procedure</td><td class="doc-clause">Annex A 5.26</td></tr>
<tr><td class="doc-name">Business Continuity Procedures</td><td class="doc-clause">Annex A 5.29 / 5.30</td></tr>
<tr><td class="doc-name">Statutory, Regulatory & Contractual Requirements Register</td><td class="doc-clause">Annex A 5.31</td></tr>
<tr><td class="doc-name">Records of Training, Skills & Competence</td><td class="doc-clause">Clause 7.2</td></tr>
<tr><td class="doc-name">Monitoring & Measurement Results</td><td class="doc-clause">Clause 9.1</td></tr>
<tr><td class="doc-name">Internal Audit Programme & Results</td><td class="doc-clause">Clause 9.2</td></tr>
<tr><td class="doc-name">Management Review Minutes</td><td class="doc-clause">Clause 9.3</td></tr>
<tr><td class="doc-name">Nonconformity & Corrective Action Log</td><td class="doc-clause">Clause 10.1 / 10.2</td></tr>
<tr><td class="doc-name">Logs of User Activities, Exceptions & Faults</td><td class="doc-clause">Annex A 8.15</td></tr>
</tbody>
</table>
</div>
</section>
<section id="recommended">
<div class="wrap">
<div class="section-eyebrow">Section 2</div>
<h2>Recommended Documents</h2>
<p class="section-note">Not mandatory, but they close gaps auditors flag and make the ISMS operationally real.</p>
<table>
<thead><tr><th>Document</th><th class="clause-col">Clause / Control</th></tr></thead>
<tbody>
<tr><td class="doc-name">Document Control Procedure</td><td class="doc-clause">Clause 7.5</td></tr>
<tr><td class="doc-name">Records Management Procedure</td><td class="doc-clause">Clause 7.5</td></tr>
<tr><td class="doc-name">Internal Audit Procedure</td><td class="doc-clause">Clause 9.2</td></tr>
<tr><td class="doc-name">Corrective Action Procedure</td><td class="doc-clause">Clause 10.1</td></tr>
<tr><td class="doc-name">Information Classification Policy</td><td class="doc-clause">Annex A 5.12</td></tr>
<tr><td class="doc-name">Password Policy</td><td class="doc-clause">Annex A 5.17</td></tr>
<tr><td class="doc-name">Information Transfer Policy</td><td class="doc-clause">Annex A 5.14</td></tr>
<tr><td class="doc-name">Mobile Device & Teleworking Policy</td><td class="doc-clause">Annex A 6.7 / 8.1</td></tr>
<tr><td class="doc-name">Bring Your Own Device (BYOD) Policy</td><td class="doc-clause">Annex A 8.1</td></tr>
<tr><td class="doc-name">Backup Policy</td><td class="doc-clause">Annex A 8.13</td></tr>
<tr><td class="doc-name">Change Management Policy</td><td class="doc-clause">Annex A 8.32</td></tr>
<tr><td class="doc-name">Clear Desk & Clear Screen Policy</td><td class="doc-clause">Annex A 7.7</td></tr>
<tr><td class="doc-name">Procedures for Working in Secure Areas</td><td class="doc-clause">Annex A 7.6</td></tr>
<tr><td class="doc-name">Disposal & Destruction Policy</td><td class="doc-clause">Annex A 7.14</td></tr>
<tr><td class="doc-name">Business Impact Analysis</td><td class="doc-clause">Annex A 5.30</td></tr>
<tr><td class="doc-name">Business Continuity Strategy</td><td class="doc-clause">Annex A 5.29</td></tr>
<tr><td class="doc-name">Exercising & Testing Plan</td><td class="doc-clause">Annex A 5.29</td></tr>
<tr><td class="doc-name">Maintenance & Review Plan</td><td class="doc-clause">Annex A 5.30</td></tr>
</tbody>
</table>
</div>
</section>
<footer>PHIXON · ISO 27001 READINESS · ROOTEDCHIP.XYZ</footer>
</main>
</body>
</html>