Markdown Editor

Kit ISMS-Branchenerweiterungen

Das ISMS an die Branche anpassen: Maßnahmen für Energie 27019, Telekommunikation 27011, Gesundheit 27799 und IoT 27400, dazu Framework-Crosswalk, 27000-Übersicht, SoA und Risikomethodik.

8 Vorlagen in 2 Schritten, in der Reihenfolge der Nutzung. Öffnen Sie eine Vorlage im Editor, füllen Sie sie aus und exportieren Sie sie als PDF, DOCX oder HTML.

Schritt 1

Branchenerweiterungen

  1. Energy Sector Controls Profile Template (ISO/IEC 27019)

    Vollständig

    OT asset classes, zone and conduit model, applicability decision, sector supplement register, energy topics mapped to Annex A, implementation table, IEC 62443 use, risk example

    ISO/IEC 27019:2024; ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only); IEC 62443 (cited)
  2. Telecommunications Sector Controls Profile Template (ISO/IEC 27011)

    Vollständig

    Telecom service and network landscape, sensitive information types, applicability decision, sector supplement register, telecom topics mapped to Annex A, implementation notes

    ISO/IEC 27011:2024 (ITU-T X.1051); ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only)
  3. Health Sector Controls Profile Template (ISO 27799)

    Vollständig

    Clinical systems and health data, health-specific considerations, break-glass access, sector supplement register, health topics mapped to Annex A, medical devices by reference

    ISO 27799:2025; ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only); medical device standards cited by name
  4. IoT Security and Privacy Profile Template (ISO/IEC 27400, 27402)

    Vollständig

    IoT role, inventory and architecture, risk sources, device security and privacy baseline, lifecycle controls, Annex A mapping, EU CRA example

    ISO/IEC 27400:2022; ISO/IEC 27402:2023; ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only); EU CRA as example
Schritt 2

Bewertungen

  1. Control Framework Crosswalk Template (ISO 27001, NIST CSF, SOC 2, NIS2, DORA)

    Vollständig

    88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

    ISO/IEC 27001:2022 + Amd 1:2024 clauses 4 to 10 and Annex A (cited only); NIST CSF 2.0; AICPA TSC 2017 (IDs only); NIS2; DORA; CIS Controls v8.1 (names only)
  2. ISO/IEC 27000 Family Map Template (Editions, Certifiable, Reading Order)

    Vollständig

    ISO/IEC 27000 family by layer, editions as of 2026-11-01, certifiable or not, revision watch, what to buy per tier, if-you-are-X-read-Y table, standards library register

    ISO/IEC 27000:2026; ISO/IEC 27001:2022 + Amd 1:2024 clause 7.5.3 (cited only)
  3. Statement of Applicability (SoA) Template (ISO/IEC 27001)

    Vollständig

    All 93 Annex A controls with basis, justification, status, reference document (DOC-ISMS IDs) and evidence, exclusions, additional controls, size tiers, records

    ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 d and Annex A (cited only); ISO/IEC 27002:2022
  4. Risk Assessment Methodology Template

    Vollständig

    Risk criteria and score-only bands, acceptance authority, criteria for assessments, event or asset-based steps, calibration, treatment, outputs, size tiers, AI variant

    ISO/IEC 27001:2022 + Amd 1:2024 cl. 6.1.2, 6.1.3, 8.2, 8.3 (cited only); ISO/IEC 27005:2022; ISO 31000:2018