Guest
Why are some documents mandatory?
Why is 8.1.1 mandantory and 8.2.1 not mandantory? the norm gives me no hints. can you tell me the text parts of the ISO where I can rean the mandantory needs?
Assign topic to the user
Expert
Dejan Kosutic
Nov 04, 2016
Answer: I assume you're referring to controls A.8.1.1 and A.8.2.1 - ISO 27001 defines what must be documented by saying "documented" or some similar expression. In case of A.8.1.1 it says "... an inventory of these assets shall be drawn up..." whereas A.8.2.1 doesn't say anything about documenting.
This article will provide you further explanation: Explanation of the basic terminology in ISO standards https://advisera.com/27001academy/blog/2015/01/12/explanation-of-the-basic-terminology-in-iso-standards/
Comment as guest or Sign in
Nov 03, 2016
Nov 03, 2016
Nov 03, 2016