Process
Process :
- Visit the client side in order to gather necessary information of their business functions.
- After a thorough study of ISO/IEC 27017 and ISO/IEC 27018 standard, prepare a questionnaire for the client in accordance to controls mentioned.
- After gathering answers, create documents for the client.
SOA (Statement of applicability)
This document states which controls are applicable and which are not along with the reason for applicability
SOP (Standard Operating Procedure)
SOP contains the step wise tasks to be performed while implementing controls in the organization. SOP's are created for different departments in the organization.
Policy document
Policy document contain the details and instructions for implementing the applicable controls in organization.
