Markdown Editor
Editor öffnen

Kit ISMS-Kundenvertrauen

Das ISMS in Kundenvertrauen umsetzen: Sicherheits-Whitepaper und Trust Center, Zertifizierungszeichen, Antwortbibliothek für Fragebögen, Kontroll-Crosswalks, Sicherheitsanhang für Kunden, NDA und Lieferantenvereinbarungen.

8 Vorlagen in 3 Schritten, in der Reihenfolge der Nutzung. Öffnen Sie eine Vorlage im Editor, füllen Sie sie aus und exportieren Sie sie als PDF, DOCX oder HTML.

Schritt 1

Kundenvertrauen

  1. Security Whitepaper and Trust Centre Template (ISO/IEC 27001)

    Vollständig

    Publication rules, what never to publish, gated documents, approval workflow, trust centre page blocks, whitepaper sections, certification wording, sub-processors, security.txt

    ISO/IEC 27001:2022 7.4, A.5.1, A.5.12, A.5.14, A.5.34 (cited only); ISO/IEC 27002:2022; RFC 9116

  2. Certification Mark Usage Rules Template (ISO/IEC 27001)

    Vollständig

    Certificate and CB mark use: rule sources, licensed marks, scope-limited claims, prohibited uses, channels, wording examples, approval log

    ISO/IEC 27001:2022 + Amd 1:2024 clause 7.4 (cited only); ISO/IEC 17021-1:2015 clause 8.3; CB and accreditation rules
Schritt 2

Fragebögen

  1. Security Questionnaire Answer Library Template (CAIQ, SIG, ISO/IEC 27001)

    Vollständig

    Answer owners, honest answer rules, CCM v4.1 domain index mapped to Annex A, answer record format, approved answers, sharing tiers and NDA gating, workflow, review triggers

    ISO/IEC 27001:2022 7.4, 7.5, A.5.12, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; CSA CAIQ v4.1 and SIG (names only)

  2. Control Framework Crosswalk Template (ISO 27001, NIST CSF, SOC 2, NIS2, DORA)

    Vollständig

    88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

    ISO/IEC 27001:2022 + Amd 1:2024 clauses 4 to 10 and Annex A (cited only); NIST CSF 2.0; AICPA TSC 2017 (IDs only); NIS2; DORA; CIS Controls v8.1 (names only)

  3. SOC 2 Control Mapping Template

    Vollständig

    All 61 SOC 2 criteria (CC1-CC9, A, C, PI, P), Type 1 vs Type 2, DC 200 system description, CUEC/CSOC, gap register, evidence and sampling

    AICPA 2017 TSC (rev. points of focus 2022); DC 200 (2018, rev. 2022)
Schritt 3

Vertrag

  1. Customer Security Addendum Template (ISO/IEC 27001 A.5.20)

    Vollständig

    Order of precedence, certifications upkeep, personnel, sub-processors, data location, incident notification, audit rights, testing, deletion, liability pointer, negotiation playbook

    ISO/IEC 27001:2022 A.5.14, A.5.20, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-2:2022

  2. Confidentiality Agreement Template (ISO/IEC 27001 A.6.6)

    Vollständig

    Confidentiality requirements analysis, five agreement variants, signing gate, register, review, model clauses incl. protected disclosures and return

    ISO/IEC 27001:2022 A.6.6 (cited only); ISO/IEC 27002:2022

  3. Supplier Security Agreement Template (ISO/IEC 27036, A.5.20)

    Vollständig

    Security schedule for supplier contracts: clauses by tier, audit rights, incident notice, sub-contractors, data location, ICT supply chain, exit, deviations

    ISO/IEC 27001:2022 A.5.19 to A.5.22 (cited only); ISO/IEC 27036-2:2022; ISO/IEC 27036-3:2023