Topic in the Kopexa blog
ISMS
Build, operate and improve an ISMS: explore guides, examples and practical answers on information security.
20–28 of 37
Creating an access control policy: who can do what, and who checks?
Use a role matrix and review record to manage joiners, movers and leavers. Turn an access list into a process you can verify.
Julian Köhn·
Introducing a new policy version: approval and acknowledgement
Take a revised policy from expert review into everyday work. With a rollout plan covering version, audience, acknowledgement and outstanding tasks.
Julian Köhn·
How do you keep ISMS evidence current and verifiable?
Check scope, reporting period and changes rather than just the upload date. With an evidence inventory and an example connecting documents to outstanding work.
Julian Köhn·
How can you reuse evidence across multiple audits?
One record can support several audits. A coverage matrix shows where scope, reporting period or review criteria require additional work.
Julian Köhn·
Migrating an ISMS from SharePoint: documents and permissions
Which version is approved, who may see it and which measure does it support? Prepare your SharePoint ISMS migration with these checks.
Julian Köhn·
Changing ISMS software: how do you preserve evidence history?
The file has moved. But can you still see when it applied and who approved it? Check historical evidence when changing ISMS systems.
Julian Köhn·
From Confluence to Kopexa: migrate policies and manage them with control
Reuse existing policies, review changes and deliver valid versions to employees. Plan the move from Confluence to Kopexa around the complete workflow.
Julian Köhn·
From Excel to an ISMS: planning your data migration
Bring risk registers, measures and evidence across in an organised way, with field mapping, a test dataset and clear acceptance criteria.
Julian Köhn·
Cyber risks in SMEs: Which actions come first?
A practical worksheet for cybersecurity priorities, accountable actions and verifiable outcomes.
Julian Köhn·