Detailed Questionnaire for ISO 27001 Certification

We'll help you navigate the certification process with ease

This questionnaire serves as preliminary information for the management systems certification body ELBACERT, a.s., to prepare an informative, non-binding quote for ISO 27001 certification.

Detailed Questionnaire for a Certification Proposal

The information provided in this questionnaire will be treated confidentially and used solely for internal purposes at ELBACERT, a.s.
If you need any assistance in completing this application, please contact us at 0903 470 453.
Fields marked with an asterisk are required. Filling out the form will take no more than 5 minutes.

Step 1 of 6 - Part 1

16%

1. Company data

In this section, please fill in your contact and company details.

Business name of the company

optional

Company Headquarters

Address

Contact person

Authorised representative to apply for certification

Name and surname of the authorised representative

Name and surname

Mobile number

E-mail of the authorised representative

A copy of the questionnaire will be sent to this e-mail address.

Enter another authorised representative

Name

Phone

Specify additional authorized representatives for the certification process.

Specify an additional contact person for communication with the certification body?

Yes

Contact person for communication with the certification body

Complete if different from the organisation representative listed.

Contact persons

Name

Phone

Enter the contact persons for communication with the certification body.

Do you want to certify:

The whole company

Only a portion of society

Number of employees

Total number of employees across all locations:

How many of them perform the same task?

Total number of self-employed individuals and freelancers

Part-time employees

Enter a number

Number of part-time workers

They work

Occasionally

the whole year

seasonal

What is the approximate amount of work in hours per month?

Workers Performing Repetitive Tasks

Please enter the number of employees in each area.

Number of employees who have read-only access to information

Number of employees without access to information systems

Number of employees with limited access to information-processing equipment

The number of employees performing activities subject to strict restrictions on the disclosure of information, i.e., where there is a high level of confidentiality (lawyers, police officers, doctors, etc.)

Physical / Virtual Workplaces

Where do your employees work from?

Do employees work from a physical location or also from a virtual one?

From a physical location.

From a virtual location.

A physical location is, for example, a company branch.

Please describe your virtual space in more detail:

Sites for certification

Which locations outside the company's headquarters will be listed on the certificate? Please enter the branches, establishments you would like to be listed on the certificate.

Other locations / branches for certification

Cf. Number

Address of the place

Number of workers

Number of changes

Note

What will be subject to certification?

2. Subject of certification

In this section, please fill in your information that is relevant to the subject of the certification activity.

The name of the activity that will be audited and will be listed on the certificate:

e.g. a construction company may have listed: construction of residential buildings.

Name of the activity in another language, if required.

Provide a translation for each language version

Specific legislative requirements

For example, the Cyber Security Act, etc.

Outsourced activities (outsourcing)

IT Administrators

developers and testers

security auditors and penetration testers

Software Solution Providers

Cloud and hosting providers

List of activities provided by an external company.

Enter other external activities if they are not in the list above:

3. Characteristics, Numbers, and Language Versions of ISO 27001 Certificates

In this section, please provide information regarding the characteristics of the certificates—specify the language versions and the number of original A4 or A3 certificates printed.

Language versions of A4 certificates

Select language versions of A4 certificates.

Number of printed A4 certificates in each language.

1 piece

2pcs

5 pcs

10 pcs

Other

Enter the number of A4 certificates or enter the required number of pieces for each standard.

4. Additional Information Regarding Certification

In this section, please fill in the information regarding the certificates you already hold.

Do you already have an ISO certificate?

Yes

Additional data for certification

Date of certification

Name of certifying authority

Voluntary data for optimal setting of the quotation

Required date of certification audit

Select the term

You will be putting the management system in place:

Sami

With the help of a consulting firm

Enter the name of the consulting firm

5. Specific Information for ISO 27001 Certification

In this section, please provide specific and additional information regarding the ISO 27001 standard, if applicable.

Additional information on ISO/IEC 27001

Please indicate the type of ISMS-related documents that will not be available for the audit team to review because they contain highly confidential or sensitive information:

Declaration of applicability

Drop files here or

Max. file size: 256 MB.

Please upload your Declaration of Applicability document.

IT infrastructure complexity

The environment is a unified, highly standardized platform of IT, servers, operating systems, databases, networks, etc.

Several different IT platforms, servers, operating systems, databases, networks

A large number of different IT platforms, servers, operating systems, databases, networks.

Select the option that matches your organisation's IT infrastructure.

Dependence on external procurement and suppliers, including cloud services

Little or no dependence on external procurement or suppliers

Some dependence on external procurement or suppliers related to some, but not all, significant business activities

High dependence on external procurement or suppliers related to some, but not all, significant business activities