Markdown Editor
에디터 열기

ISMS 고객 신뢰 키트

ISMS를 고객 신뢰로 연결: 보안 백서와 트러스트 센터, 인증 마크 사용, 설문 답변 라이브러리, 통제 매핑, 고객 보안 부속서, NDA 및 공급자 계약.

사용 순서에 따라 3단계로 정리한 템플릿 8개입니다. 편집기에서 템플릿을 열어 작성한 뒤 PDF, DOCX 또는 HTML로 내보낼 수 있습니다.

1단계

고객 신뢰

  1. Security Whitepaper and Trust Centre Template (ISO/IEC 27001)

    전체

    Publication rules, what never to publish, gated documents, approval workflow, trust centre page blocks, whitepaper sections, certification wording, sub-processors, security.txt

    ISO/IEC 27001:2022 7.4, A.5.1, A.5.12, A.5.14, A.5.34 (cited only); ISO/IEC 27002:2022; RFC 9116

  2. Certification Mark Usage Rules Template (ISO/IEC 27001)

    전체

    Certificate and CB mark use: rule sources, licensed marks, scope-limited claims, prohibited uses, channels, wording examples, approval log

    ISO/IEC 27001:2022 + Amd 1:2024 clause 7.4 (cited only); ISO/IEC 17021-1:2015 clause 8.3; CB and accreditation rules
2단계

질문지

  1. Security Questionnaire Answer Library Template (CAIQ, SIG, ISO/IEC 27001)

    전체

    Answer owners, honest answer rules, CCM v4.1 domain index mapped to Annex A, answer record format, approved answers, sharing tiers and NDA gating, workflow, review triggers

    ISO/IEC 27001:2022 7.4, 7.5, A.5.12, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; CSA CAIQ v4.1 and SIG (names only)

  2. Control Framework Crosswalk Template (ISO 27001, NIST CSF, SOC 2, NIS2, DORA)

    전체

    88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

    ISO/IEC 27001:2022 + Amd 1:2024 clauses 4 to 10 and Annex A (cited only); NIST CSF 2.0; AICPA TSC 2017 (IDs only); NIS2; DORA; CIS Controls v8.1 (names only)

  3. SOC 2 Control Mapping Template

    전체

    All 61 SOC 2 criteria (CC1-CC9, A, C, PI, P), Type 1 vs Type 2, DC 200 system description, CUEC/CSOC, gap register, evidence and sampling

    AICPA 2017 TSC (rev. points of focus 2022); DC 200 (2018, rev. 2022)
3단계

계약

  1. Customer Security Addendum Template (ISO/IEC 27001 A.5.20)

    전체

    Order of precedence, certifications upkeep, personnel, sub-processors, data location, incident notification, audit rights, testing, deletion, liability pointer, negotiation playbook

    ISO/IEC 27001:2022 A.5.14, A.5.20, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-2:2022

  2. Confidentiality Agreement Template (ISO/IEC 27001 A.6.6)

    전체

    Confidentiality requirements analysis, five agreement variants, signing gate, register, review, model clauses incl. protected disclosures and return

    ISO/IEC 27001:2022 A.6.6 (cited only); ISO/IEC 27002:2022

  3. Supplier Security Agreement Template (ISO/IEC 27036, A.5.20)

    전체

    Security schedule for supplier contracts: clauses by tier, audit rights, incident notice, sub-contractors, data location, ICT supply chain, exit, deviations

    ISO/IEC 27001:2022 A.5.19 to A.5.22 (cited only); ISO/IEC 27036-2:2022; ISO/IEC 27036-3:2023