Bộ mẫu quản lý tích hợp ISMS

IMS scope and integration level, clause mapping 27001/20000-1/9001/22301, 27013 service management integration points, common processes, document consolidation, integrated audits

One SoA for ISMS and AIMS: 93 ISO/IEC 27001 and 38 ISO/IEC 42001 Annex A rows, shared clauses, integrated risk and impact process, overlap groups, exclusions

Harmonized structure documents, standard-specific templates with editions, non-ISO frameworks and regulations, edition watch list, coverage register

88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

CSF 2.0 profile workbook: scope, Tiers, all 106 Subcategories with Current/Target/gap, SP 800-53 refs, gap summary, action plan, exec summary

All 61 SOC 2 criteria (CC1-CC9, A, C, PI, P), Type 1 vs Type 2, DC 200 system description, CUEC/CSOC, gap register, evidence and sampling

AIMS SoA: scope, risk treatment link, all 38 Annex A controls with basis, justification, status, owner, evidence, Annex B ref, extra controls, traceability

Audit schedule + report with findings

Management review minutes: inputs mapped to ISO 9001:2026, ISO/IEC 27001:2022 and 42001:2023, conclusions, results, action log

Controlled document master: header, approvals, revision history, distribution, body, records produced, change control, clause 7.5 control map, numbering, status lifecycle