DownloadThe ClouDAT tool supports tasks for planning an Information Security Management System (ISMS) cloud services that accords to ISO 27001. For this purpose the ClouDAT tool provides several editors in form of eclipse plugins that allow the measuring of the needed information. Furthermore it enables the generation of parts of the needed documentation for an ISO 27001 ISMS.
In the context of the planning of an ISO 27001 ISMS the ClouDAT tool provides functionality for the following tasks:
1. Specification of ISMS scope
2. Identification of assets
3. Risk analysis
4. Risk treatment
5. Statement of Applicability
6. Acceptance of residual risks
Some tasks are supported by a pattern based approach. Here the ClouDAT tool provides a graphical pattern named Cloud System Analysis Pattern (CSAP) for specifying the ISMS scope. For the risk analysis textual patterns for threats and corresponding security requirements are provided. Users are also able to create their own patterns.
Features
- Graphical editor for pattern based specification of the ISMS scope
- Graphical editor for designing a pattern for the ISMS scope
- Text editor for defining threat patterns and security requirement patterns
- Text editor for instantiating threat patterns and security requirement patterns
- Graphical editor for asset identification
- Text editor for risk analysis
- Text editor for Statement of Applicability
- Generation of documentation in PDF format
- Validity checks
Project Samples
