Markdown Editor

Набір галузевих розширень СУІБ

Адаптуйте СУІБ до галузі: заходи для енергетики 27019, телекомунікацій 27011, охорони здоров'я 27799 та IoT 27400, а також зіставлення фреймворків, карта 27000, SoA і методика ризиків.

Шаблонів: 8, кроків: 2, у порядку використання. Відкрийте будь-який шаблон у редакторі, заповніть його та експортуйте в PDF, DOCX або HTML.

Крок 1

Галузеві розширення

  1. Energy Sector Controls Profile Template (ISO/IEC 27019)

    Повний

    OT asset classes, zone and conduit model, applicability decision, sector supplement register, energy topics mapped to Annex A, implementation table, IEC 62443 use, risk example

    ISO/IEC 27019:2024; ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only); IEC 62443 (cited)
  2. Telecommunications Sector Controls Profile Template (ISO/IEC 27011)

    Повний

    Telecom service and network landscape, sensitive information types, applicability decision, sector supplement register, telecom topics mapped to Annex A, implementation notes

    ISO/IEC 27011:2024 (ITU-T X.1051); ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only)
  3. Health Sector Controls Profile Template (ISO 27799)

    Повний

    Clinical systems and health data, health-specific considerations, break-glass access, sector supplement register, health topics mapped to Annex A, medical devices by reference

    ISO 27799:2025; ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only); medical device standards cited by name
  4. IoT Security and Privacy Profile Template (ISO/IEC 27400, 27402)

    Повний

    IoT role, inventory and architecture, risk sources, device security and privacy baseline, lifecycle controls, Annex A mapping, EU CRA example

    ISO/IEC 27400:2022; ISO/IEC 27402:2023; ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 and Annex A (cited only); EU CRA as example
Крок 2

Оцінки

  1. Control Framework Crosswalk Template (ISO 27001, NIST CSF, SOC 2, NIS2, DORA)

    Повний

    88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

    ISO/IEC 27001:2022 + Amd 1:2024 clauses 4 to 10 and Annex A (cited only); NIST CSF 2.0; AICPA TSC 2017 (IDs only); NIS2; DORA; CIS Controls v8.1 (names only)
  2. ISO/IEC 27000 Family Map Template (Editions, Certifiable, Reading Order)

    Повний

    ISO/IEC 27000 family by layer, editions as of 2026-11-01, certifiable or not, revision watch, what to buy per tier, if-you-are-X-read-Y table, standards library register

    ISO/IEC 27000:2026; ISO/IEC 27001:2022 + Amd 1:2024 clause 7.5.3 (cited only)
  3. Statement of Applicability (SoA) Template (ISO/IEC 27001)

    Повний

    All 93 Annex A controls with basis, justification, status, reference document (DOC-ISMS IDs) and evidence, exclusions, additional controls, size tiers, records

    ISO/IEC 27001:2022 + Amd 1:2024 6.1.3 d and Annex A (cited only); ISO/IEC 27002:2022
  4. Risk Assessment Methodology Template

    Повний

    Risk criteria and score-only bands, acceptance authority, criteria for assessments, event or asset-based steps, calibration, treatment, outputs, size tiers, AI variant

    ISO/IEC 27001:2022 + Amd 1:2024 cl. 6.1.2, 6.1.3, 8.2, 8.3 (cited only); ISO/IEC 27005:2022; ISO 31000:2018