Per ISO/IEC 27002:2022 | 5.3 - Segregation of Duties, “Segregation of duties and areas of responsibility aims to separate conflicting duties between different individuals in order to prevent one individual from executing potential conflicting duties on their own. The organization should determine which duties and areas of responsibility need to be segregated.”

Per ISO/IEC 27002:2022 | 5.1 - Policies for Information Security, “Information security policy and topic-specific policies should be defined, approved by management, published, communicated to and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur”.

Per ISO/IEC 27002:2022 | 5.2 - Information Security Roles and Responsibilities, Allocation of information security roles and responsibilities should be done in accordance with the information security policy and topic-specific policies. The organization should define and manage responsibilities for

ISMS stands for Information Security Management System. It refers to a systematic approach to managing an organization's information security processes and controls. An ISMS is designed to protect the confidentiality, integrity, and availability of an organization's information assets. In the context of ISO/IEC 27001, an ISMS is a framework that aligns with the requirements of the ISO/IEC 27001 standard. 

ISO/IEC 27701 is an international standard that provides guidelines for implementing and maintaining a Privacy Information Management System (PIMS) based on the requirements of ISO/IEC 27001, which is the internationally recognized standard for information security management. ISO/IEC 27701 focuses specifically on privacy management within the context of an organization's overall information security management system.

In the context of ISO/IEC 27701, a PIMS refers to a Privacy Information Management System. It is a framework that organizations can implement to manage privacy risks and ensure compliance with privacy laws and regulations. A PIMS is based on the requirements and guidelines outlined in ISO/IEC 27701, which is an extension to the ISO/IEC 27001 standard for information security management.

ISO/IEC 22301 is an international standard that provides guidelines for implementing and maintaining a Business Continuity Management System (BCMS). The standard focuses on helping organizations establish a framework and processes to effectively manage and respond to disruptions and incidents that could impact their ability to continue operating.

An SoA (Statement of Applicability) for ISO 27001 is a document that identifies the controls specified in the ISO 27001 standard and outlines how they are implemented within an organization. It is a crucial component of the Information Security Management System (ISMS) and provides a comprehensive overview of the security controls applicable to the organization's information assets.