Skip to Content

Wiki source code of Start Here - ISMS Quick Start

Last modified by Lee Pedley on 2026/09/21 21:59
Show last authors
1 {{velocity}}
2 {{html wiki="true" clean="false"}}
3 <style>.qs-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(250px,1fr));gap:12px;margin:14px 0 22px}.qs-card{border:1px solid #d9dfe5;border-radius:8px;padding:15px}.qs-card h3{margin-top:0}.qs-table{width:100%;border-collapse:collapse}.qs-table th,.qs-table td{padding:9px;border-bottom:1px solid #e1e5e9;text-align:left;vertical-align:top}.qs-actions .btn{margin-right:6px;margin-bottom:6px}</style>
4 <div class="box infomessage"><strong>Start here</strong><br/>For ISMS records, use the <strong>Add New...</strong> button inside each register. The XWiki <strong>Create</strong> button in the top-right creates general wiki pages and is not the normal route for structured ISMS records.</div>
5 <div class="qs-actions"><a class="btn btn-primary" href="$xwiki.getURL('ISMS.Dashboard','view')">Open Management Dashboard</a><a class="btn btn-default" href="$xwiki.getURL('ISMS.Settings','view')">Check ISMS Settings</a><a class="btn btn-default" href="$xwiki.getURL('ISMS.DataQuality','view')">Run Data Quality Check</a></div>
6 <h2>First-time setup</h2><div class="qs-grid"><div class="qs-card"><h3>1. Confirm settings</h3><p>Check your 5 x 5 risk bands, residual-risk review threshold, and control/evidence/document reminder windows.</p><p><a href="$xwiki.getURL('ISMS.Settings','view')">Open Settings</a></p></div><div class="qs-card"><h3>2. Load your controlled documents</h3><p>Add approved policies, procedures, standards, forms and records. Keep owner, version, approval and review dates current.</p><p><a href="$xwiki.getURL('Controlled Documents.WebHome','view')">Open Controlled Documents</a></p></div><div class="qs-card"><h3>3. Build Controls &amp; SoA</h3><p>Create control records from material you are licensed to use. Record applicability, justification, implementation status, ownership, evidence and review dates.</p><p><a href="$xwiki.getURL('Controls and SoA.WebHome','view')">Open Controls &amp; SoA</a></p></div></div>
7 <h2>Day-to-day workflow</h2><table class="qs-table"><thead><tr><th>When you need to...</th><th>Use</th><th>What to keep current</th></tr></thead><tbody><tr><td>Record and assess an information-security risk</td><td><a href="$xwiki.getURL('Risks.WebHome','view')">Risks</a></td><td>Owner, 1-5 inherent assessment, treatment decision, linked controls, residual assessment, status and target date.</td></tr><tr><td>Track an action that reduces a risk</td><td><a href="$xwiki.getURL('Risk Treatments.WebHome','view')">Risk Treatments</a></td><td>Related risk, action, owner, target date, status and completion date.</td></tr><tr><td>Store proof that a control/process is operating</td><td><a href="$xwiki.getURL('Evidence.WebHome','view')">Evidence</a></td><td>Description, owner, dates, linked controls/risks and attachments.</td></tr><tr><td>Plan or record assurance activity</td><td><a href="$xwiki.getURL('Audits.WebHome','view')">Audits</a></td><td>Scope, lead auditor, dates, status, controls covered and conclusion.</td></tr><tr><td>Record an issue from an audit</td><td><a href="$xwiki.getURL('Findings.WebHome','view')">Findings</a></td><td>Source audit, severity, description, root cause, owner, due date and status.</td></tr><tr><td>Track remediation and verify effectiveness</td><td><a href="$xwiki.getURL('Corrective Actions.WebHome','view')">Corrective Actions</a></td><td>Related finding, remediation, owner, due date, completion and effectiveness review.</td></tr></tbody></table>
8 <h2>Routine governance</h2><div class="qs-grid"><div class="qs-card"><h3>Weekly / operational review</h3><p>Use the Management Dashboard attention queue to deal with overdue treatments, reviews, expiring evidence and corrective actions.</p></div><div class="qs-card"><h3>Before an audit or management review</h3><p>Run the Data Quality Check, then review the Risk Report, SoA Report and Management Review Pack.</p></div><div class="qs-card"><h3>Administration</h3><p>Configure XWiki reader/editor/administrator groups before wider rollout. Keep PostgreSQL and XWiki backups scheduled and retain an off-server copy.</p></div></div>
9 <div class="box warningmessage">This workspace supports your ISMS process and evidence. It does not by itself establish ISO/IEC 27001 conformity or certification, and it intentionally does not reproduce licensed ISO control wording.</div>
10 {{/html}}
11 {{/velocity}}