I am looking for some example documentation for compliance with ISO 27001 (formerly BS 7799) with specific details on Information Security and Data Protection. Are there any sample templates available for these policies available (preferably for free, or at least at a reasonable cost) that are trustworthy?
closed as off-topic by gnat, GlenH7, World Engineer♦ Nov 12 at 23:17
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions asking us to recommend a tool, library or favorite off-site resource are off-topic for Programmers as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it." – gnat, GlenH7, World Engineer
The documentation is non-trivial, and is typically provided by a third party, after they've audited your company for compliance and certified you as compliant. The documents are the result of the long compliance and certification process.
It's very unusual for someone who is not involved with one of the third parties (Accredited Registrars) to find use for a template documenting compliance. The kinds of people who require compliance, typically require that the compliance is audited and certified by a third party.
In other words, if you don't already know about it as a part of your work, and don't work for a company which provides certifications for a living, be careful - what you're doing may not be relevant, and, in some cases, even shady or illegal.
Actually ISO 27001 and BS 7799 are not exactly the same thing. ISO27001 implement only the second part of BS7799.
Here you can find the official specification with guidance for use.