Q: Onboarding Video

<p>${youtube}<a href="e4QViORN_N4">Cyber Comply Onboarding Video</a></p>

Question 1

Guide to ISO/IEC 27001:2022 – Information Security Management

Accepted Answer

What is ISO 27001 information security management?

ISO/IEC 27001 is the international standard for information security management.

Part of the ISO 27000 series, ISO 27001 sets out a framework for all organisations to establish, implement, operate, monitor, review, maintain and continually improve an ISMS (information security management system).

Certification to the ISO 27001 standard is recognised worldwide as proof that your organisation’s information security management is aligned with best practice.

What is an ISMS?

An ISMS takes a systematic approach to securing the CIA (confidentiality, integrity and availability) of corporate information assets.

An ISO 27001 ISMS consists of organisational, people, physical and technological controls, selected on the basis of regular risk assessments.

Its technology- and vendor-neutral approach makes it suitable for all organisations, whatever their size, complexity, sector or location.

ISO 27001 has changed

ISO/IEC 27001:2022 – the newest version of ISO 27001 – was published in October 2022. As of 30 April 2024, certification bodies can no longer offer (re)certification to the 2013 edition of the Standard.

For more information about ISO 27001:2022 and its companion standard, ISO 27002:2022, and how they affect your organisation, visit ISO 27001 and ISO 27002:2022 updates.

ISO 27001 benefits

ISO 27001 is one of the most popular information security standards in existence. Independent accredited certification to

Question 2

Configuring Single Sign-On with Microsoft Entra

Accepted Answer

This article guides you through the steps needed to integrate Microsoft Entra ID (formerly Azure Active Directory) with CyberComply for SSO (single sign-on).

Prerequisites

You must be logged into CyberComply as an organisation administrator for the organisation that you are configuring SSO for.
You should be familiar with and have appropriate permissions to configure your Microsoft Entra account.

Configure SAML

CyberComply

Navigate to your Account Summary page.
Enable the toggle switch for Single sign-on configuration:
Select the SAML SSO metadata - download option and save the file to your device.

Microsoft Entra

Select Enterprise applications.
Select New application.
Select Create your own application.
Provide a name for the application and verify that the (Non-gallery) option is selected. Click Create.
Once created, select Single sign-on.
Select SAML.
Select Upload metadata file and upload the file you previously downloaded from CyberComply.
This will populate the Identifier and Reply URL fields. Click Save. ![](https://storage.crisp.chat/users/

Question 3

Onboarding Video

Accepted Answer

${youtube}Cyber Comply Onboarding Video

Question 4

Guide to the General Data Protection Regulation (GDPR)

Accepted Answer

What does ‘GDPR’ stand for?

The General Data Protection Regulation (GDPR) is a law that governs how organisations process personal data

Following Brexit, there are now two GDPRs: the EU GDPR and the UK GDPR.

The EU GDPR supersedes the EU Data Protection Directive 1995 and all member state law based on it. It applies to organisations that process or control the processing of EU residents’ personal information, wherever the organisations are based.

The UK’s post-Brexit version of the EU GDPR is the UK GDPR. It is similar to the EU regulation and places similar obligations on data controllers and processors.

For the sake of clarity, we refer to “the GDPR” to mean those requirements common to both the UK and EU versions of the Regulation. Where the two laws differ, we use the regional prefixes.

UK data protection law is currently being revised. We are following the progress of the Data Protection and Digital Information Bill through parliament and will keep you updated on how it might affect your data processing obligations.

What is the purpose of the GDPR?

The GDPR gives data subjects more control over how their personal data is processed. It places a range of obligations on organisations that process and control the processing of personal data.

What is the relationship between the EU GDPR and the DPA 2018 and UK GDPR?

The UK GDPR is supplemented by the DPA (Data Protection Act) 2018. The DPA 2018 applies the GDPR’s

Question 5

Welcome to CyberComply

Accepted Answer

CyberComply is a comprehensive solution that accelerates and automates your compliance and security journey. Whether you’re complying with the GDPR, certifying to ISO 27001 or otherwise improving your organisation’s security posture, CyberComply will help you identify and reduce risks and keep ahead of cyber threats.

Website: https://www.itgovernance.co.uk/cybercomply

Platform: https://cybercomply.co.uk

Blog: https://www.itgovernance.co.uk/blog

Question 6

Inviting additional users

Accepted Answer

If you are an organisation administrator, you can add more users to CyberComply as follows:

Click the Account icon with your initials at the top right, then click Organisation Details.
Click the Plus icon in the Users panel.
Enter the email address and user role of the new user, and click Invite.

Frequently Read Articles

Browse All Categories