Organisation profile
Last checked on
On Organisation you describe what your company does and for whom, where it works, how many people it employs, and which internal and external topics help or hinder it.
Why this protects your organisation
A payroll SaaS company with twelve developers faces different threats from a hosting provider with three data centres. Writing down what you do and what is changing around you, such as a single key supplier or new customer demands, makes it easier to judge which risks and measures matter to you and to explain that choice to an auditor. ISO 27001 clause 4.1 asks you to understand this context; this page is where you record it.
Steps
- Open Organisation in the Organisation group.
- Answer What does your organisation do, and for whom? in one or two plain sentences.
- Add every place you work from under Locations, and fill in Number of employees.
- Under What affects your organisation, click Add a topic for each thing that helps or hinders you.
- For each topic choose the Origin (Internal or External) and the Effect (Opportunity or Threat), and write a Description.
- Click Save.
There is one profile per workspace. Everyone in the workspace can read it. Owners and members can change it, and so can advisors who have edit rights for Organisation.
The fields
- What does your organisation do, and for whom? A short description in your own words, for example the product you build and the kind of customer you build it for.
- Locations Every place your organisation operates from, one per entry.
- Number of employees The current headcount.
- What affects your organisation Topics that shape your management system. An internal topic comes from inside the company (a small team with one person who knows the infrastructure), an external one from outside (a new regulation, a customer that asks for certification). Mark each one as an opportunity or a threat.
How it connects
The topics you mark as threats are a natural starting point for your risks. What you write here also helps when you define the scope and list your interested parties.
If it does not work
The fields are greyed out and there is no Save button
You can view the profile but not change it. Advisors need edit rights for the Organisation module, which the workspace owner grants on the Members screen.
Saving fails with an error on a topic
Every topic needs an Origin, an Effect and a Description. Fill in the missing field, or remove the empty topic.
Number of employees will not accept my value
Enter a whole number of zero or more, without text or ranges.
Screens this is about
- Organisation