Guest user Created: Jun 07, 2019 Last commented: Jun 07, 2019

Documenting ISO 27001 and ISO 22301 documents

Hello, I have a question, I have read the list of documents in which are detailed which are mandatory in 27001 and which in 22301, in my case. We only carry out those that are obligatory but, I do not understand if I have to do them in duplicate for each one of the rules or if you only have to make a single document naming the two norms in the same or on the contrary you have to make a document for each one of the standards, specifying that it is the SGSO and of the SGCN. Can you confirm it please? Thank you.

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Jun 07, 2019

Answer:

ISO 22301 and ISO 27001 share many similar requirements that allow the use of a single document for both systems (e.g., document control procedure, internal audit etc.). Other required documents defined specifically for each standard, such as security policies and continuity strategy, can be kept separated without risks to create inconsistencies.

This article will provide you further explanation about integrating management systems:
- How to implement integrated management systems https://advisera.com/27001academy/blog/ 15/10/05/how-to-implement-integrated-management-systems/

This article will provide you further explanation about document management:
- Document management in ISO 27001 & BS 25999-2 https://advisera.com/27001academy/blog/2010/03/30/document-management-within-iso-27001-bs-25999-2/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jun 07, 2019

Expert Advice Community