Main documents for certification

Answer:

The main challenge with auditors or Certification Bodies happens when organizations focus on writing the documents without taking care that the described activities are really implemented and documented. A second one is keeping the documentation updated when changes are implemented in the ISMS environment.

Regarding specific areas and documentation, you must focus on writing all the mandatory documents (included in the toolkit there is a List of Documents file that identifies these ones), and base all the controls to be written and implemented on the results of the risk assessment.

These articles will provide you further explanation about documents:
- List of mandatory documents required by ISO 27001 (2013 revision) https://advisera.com/27001academy/ knowledgebase/list-of-mandatory-documents-required-by-iso-27001-2013-revision/
- The basic logic of ISO 27001: How does information security work? https://advisera.com/27001academy/knowledgebase/the-basic-logic-of-iso-27001-how-does-information-security-work/