Expert Advice Community

Guest

Annex A controls

  Quote
Guest
Guest user Created:   Jun 28, 2022 Last commented:   Jun 28, 2022

Annex A controls

I am using your Toolkit to develop my ISO27K documentation. Crosschecking the Annex A controls and those referenced in the templates I noticed that some controls are missing. For example, the complete A.5 and A.6 are not referenced anywhere. As well as sub controls from A.9, A.11 (many), A.12. How shall I deal with them? If you like I can send you the whole list. Do they refer indirectly to the documents, or do I have to create new one’s from scratch? I am trying to compile the SOA but I can’t, due to the above.

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Jun 28, 2022

Please note that many of the clauses and controls you mentioned do not need to be documented according to the standard, and in our opinion, it would be an overhead to document each and every one of them in a small company. 

Our ISO 27001 Documentation Toolkit was designed to cover all mandatory documents and some documents that are not mandatory but are commonly used.

Our toolkit is created specifically for smaller companies that want to implement ISO 27001 in a quick way, without unnecessary paperwork.

For faster verification, you can use the List of documents file included in the toolkit. This document shows you which controls are covered by each template.

In case there is a document you need to implement that is not in the toolkit, you can request support from us to help develop it.

This article will also help you: List of mandatory documents required by ISO 27001 (2013 revision) https://advisera.com/27001academy/knowledgebase/list-of-mandatory-documents-required-by-iso-27001-2013-revision/ 

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jun 28, 2022

Jun 28, 2022