Question:Paragraphs references in articles and learning resources

[cjohnsonuk]

In the eramba training article here

DORA, ISO, NIST, Etc

and the forum article here

Eramba & ISO 27001 (2022)

In this article we will describe how eramba is typically used for ISO 27001 (Version 2022-10) requirements. Note: there is a second guide that focus on Annex A requirements This is a is a long but very practical read, the author of this article has certified ISO 27001 in a dozen organisations in different countries and is also an experienced eramba user. 4 - Context of the Organisation These requirements (involved parties, their needs, which ones can be addressed by the ISMS, external and in…

there appears to be very specific paragraph numbers but they don’t appear to relate to the Paragraph numbers in Annex A of 27001:2022

In the article and the learning page paragraph 6.1.2 realtes to actions to address risk assessment

But in ISO 27001:2022 6.1 relates to Screening and people controls.

For the avoidance of further confusion can someone please explain how the paragraphs in the training materials map onto the paragraphs in the ISO 27001:2022 documentation?

Thanks

[kisero]

those guides in the learning portal need to go away - in fact im removing them now. for ISO and many other articles is best if you use the forum posts we publish here: