Markdown Editor
Mở trình soạn thảo

Bộ mẫu niềm tin khách hàng ISMS

Biến ISMS thành niềm tin của khách hàng: sách trắng bảo mật và trust center, sử dụng dấu chứng nhận, thư viện trả lời bảng câu hỏi, đối chiếu kiểm soát, phụ lục bảo mật khách hàng, NDA và thỏa thuận nhà cung cấp.

8 mẫu trong 3 bước, theo thứ tự sử dụng. Mở mẫu bất kỳ trong trình soạn thảo, điền nội dung rồi xuất ra PDF, DOCX hoặc HTML.

Bước 1

Niềm tin khách hàng

  1. Security Whitepaper and Trust Centre Template (ISO/IEC 27001)

    Đầy đủ

    Publication rules, what never to publish, gated documents, approval workflow, trust centre page blocks, whitepaper sections, certification wording, sub-processors, security.txt

    ISO/IEC 27001:2022 7.4, A.5.1, A.5.12, A.5.14, A.5.34 (cited only); ISO/IEC 27002:2022; RFC 9116

  2. Certification Mark Usage Rules Template (ISO/IEC 27001)

    Đầy đủ

    Certificate and CB mark use: rule sources, licensed marks, scope-limited claims, prohibited uses, channels, wording examples, approval log

    ISO/IEC 27001:2022 + Amd 1:2024 clause 7.4 (cited only); ISO/IEC 17021-1:2015 clause 8.3; CB and accreditation rules
Bước 2

Bảng hỏi

  1. Security Questionnaire Answer Library Template (CAIQ, SIG, ISO/IEC 27001)

    Đầy đủ

    Answer owners, honest answer rules, CCM v4.1 domain index mapped to Annex A, answer record format, approved answers, sharing tiers and NDA gating, workflow, review triggers

    ISO/IEC 27001:2022 7.4, 7.5, A.5.12, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; CSA CAIQ v4.1 and SIG (names only)

  2. Control Framework Crosswalk Template (ISO 27001, NIST CSF, SOC 2, NIS2, DORA)

    Đầy đủ

    88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

    ISO/IEC 27001:2022 + Amd 1:2024 clauses 4 to 10 and Annex A (cited only); NIST CSF 2.0; AICPA TSC 2017 (IDs only); NIS2; DORA; CIS Controls v8.1 (names only)

  3. SOC 2 Control Mapping Template

    Đầy đủ

    All 61 SOC 2 criteria (CC1-CC9, A, C, PI, P), Type 1 vs Type 2, DC 200 system description, CUEC/CSOC, gap register, evidence and sampling

    AICPA 2017 TSC (rev. points of focus 2022); DC 200 (2018, rev. 2022)
Bước 3

Hợp đồng

  1. Customer Security Addendum Template (ISO/IEC 27001 A.5.20)

    Đầy đủ

    Order of precedence, certifications upkeep, personnel, sub-processors, data location, incident notification, audit rights, testing, deletion, liability pointer, negotiation playbook

    ISO/IEC 27001:2022 A.5.14, A.5.20, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-2:2022

  2. Confidentiality Agreement Template (ISO/IEC 27001 A.6.6)

    Đầy đủ

    Confidentiality requirements analysis, five agreement variants, signing gate, register, review, model clauses incl. protected disclosures and return

    ISO/IEC 27001:2022 A.6.6 (cited only); ISO/IEC 27002:2022

  3. Supplier Security Agreement Template (ISO/IEC 27036, A.5.20)

    Đầy đủ

    Security schedule for supplier contracts: clauses by tier, audit rights, incident notice, sub-contractors, data location, ICT supply chain, exit, deviations

    ISO/IEC 27001:2022 A.5.19 to A.5.22 (cited only); ISO/IEC 27036-2:2022; ISO/IEC 27036-3:2023