IT Governance Blog on IT governance, risk management, compliance and information security.

Avoid Re-Inventing Existing Wheels

Every organization who licenses personal information about a resident of Massachusetts shall be in full compliance with 201 CMR 17.00 on or before March 1, 2010.

ISO/IEC 27001:2005 directly covers 95% of the 201 CMR 17.00 requirements without modification and with a few specific requirements added to support the prescriptive requirement to encrypt personal information, ISO/IEC 27001:2005 provides a truly comprehensive information security program that will stand-up to the next round of state and/or federal regulations.

Accelerate your 201 CMR 17.00/ISO 27001 project with The 201 CMR 17.00 / ISO 27001 Toolkit which includes nearly 400 densely packed pages of fit-for-purpose policies and procedures.The Toolkit will save you months of work, help you avoid costly trial-and-error dead-ends, and ensure everything is covered to current 201 CMR 17.00 / ISO 27001 standard.

This ISMS (201 CMR 17.00/ISO 27001) Documentation Toolkit contains:

• Copy of 201 CMR 17.00
• Copy of FAQs from the Massachusetts Office of Consumer Affairs and Business Regulation
• Mapping of the requirements within 201 CMR 17 with ISO/IEC 27001:2005
• Model Information Security Policy and model Statement of Applicability
• Pre-written Information Security Manual
• vsRisk and RA2 Risk Assessment Tool Integration Templates (but not vsRisk or RA2 themselves)
• Business Continuity Plan
• Service Level Agreement Template
• 450+ pages of fit-for-purpose information
• 120+ pre-written policies, procedures, templates and guidance including 201 CMR 17 requirements
• Internal audit and Corrective and Preventive Action, CAPA, documentation
• Implementation manager guidance
• Enterprise security assessment tool
• Gap analysis/ISO/IEC 27001 Audit tool
• ‘What is ISO27001/ISO27002?’ (project staff training slides)
• PDCA and documentation pyramid presentation

You will also receive a unique drafting support service and 12 months of automatic updates.

Order today for immediate download.