Documentation requirements of integrated EU GDPR and ISO 27001 documents

1. sales@globalmanagergroup.com www.globalmanagergroup.com

2. EU GDPR Integrated with ISO 27001 ISMS Documentation Kit Manual, Procedures, Templates, Audit Checklist

3. Description of EU GDPR Documentation Kit? The integrated system implementation of the General Data Protection Regulation(GDPR) and Information Security Management System(ISMS) to develop data protection and information security-related controls are necessary for every IT operational organization. The ISMS emphasizes more on measuring and evaluating ISMS performance, as well as having more controls on outsourcing considering the nature of IT business.

4. Content of EU GDPR Documents • • • ISMS Manual ISMS and GDPR Policy ISO 27001 and GDPR Procedures Standard Operating Procedures (SOPs) Process Flow Charts Filled Forms ISO 27001 Audit Checklist • • • •

5. ISMS Manual It covers a sample copy of the information security management system manual and clause-wise details for how ISMS systems are implemented.

6. Information Security Policies It covers guidelines for controls applied as per ISMS guidelines. The policy document templates are provided to frame the information security controls as listed below. List of Policies • • • • • • • • • • • • Infrastructure Policy Policy for Access Card Clear Desk and Clear Screen Policy Electronic Devices Policy Patch Management Visitor Policy LAN Policy Mobile Computing Policy Messenger and E-mail IT Access Control Policy Data Protection Policy Cloud Security Policy

7. GDPR Policies It covers guidelines applied as per GDPR guidelines. The policy document templates are provided to frame the GDPR implementation as listed below. List of Policies • • Data Protection Policy Cross-border processing or transfers of personal data • Privacy by Design / by Default Policy • Data Classification Policy • Data Retention Policy • Cookies Policy

8. Information Security Procedures It covers a sample copy of mandatory all the Information security management system procedures covering all the details as per ISMS requirements. List of ISMS Procedures • • • • Procedure for Management Review Procedure for Corrective Action Procedure for Scope Documentation for Implementation Procedure for Risk Assessment Procedure for Physical and Environmental Security Procedure for Access Control Procedure for Business Continuity Management Planning Procedure for ISMS change management • • • •

9. GDPR Procedures It covers a sample copy of mandatory all the general data protection regulation procedures covering all the details as per GDPR requirements. List of GDPR Procedures • • Data Inventory Procedures Subject Access Request Procedure • • Obtaining Valid Consent Data Breach notification & handling Procedures • Data Protection Impact Assessment • Procedure for handling GDPR Data Subject Rights

10. Standard Operating Procedures It covers sample copies of SOPs to link with significant aspects issues in the organization. It takes care of all such issues and is used as a training guide as well as to establish control and make a system in the organization. List of SOPs • • • SOP for Liaison with specialist organizations SOP for Group Internet and E-mail Usage SOP for Software configuration management SOP for the Management of removable media SOP for the Handling of virus attacks SOP for Information security incident management SOP for Audit trails SOP for Business Continuity Plan SOP for Server hardening • • • • • •

11. Process Flow Charts It covers guideline for processes, process model. It covers process flow chart activities of all the main and critical processes with input-output matrix for manufacturing organization. List of Process Flow Chart • • • • • • Tax Account Related BPO-Work Marketing Purchase Software Development HRD and Training Web Application

12. Audit Checklist ISMS requirement wise as well as technical audit checklist and best practices are given. • ISMS Good Practices Audit Checklist • ISMS Clausewise • Controls Audit Checklist

13. Advantages of Documentation Kit • Customizable Templates • Fully Compliant with Standards • More Cost & Time Efficient • Developed by Experts • Quick BUY Options

14. How Useful is This Documentation? • The integrated EU GDPR with ISMS documentation kit can be useful to accelerate the documentation process, certification. which results in quick • The GDPR policies and ISMS policies given in this kit help users to develop information security and data protection control effectively. • The kit takes to care of all the sections and sub-sections of information security management system requirements as well as EU GDPR requirements. We have cross-referred the requirements with our documents to give you better confidence in your system.

15. THANK YOU sales@globalmanagergroup.com www.globalmanagergroup.com