Process diagram

1. I would like to know if there is an excel template to register a new change.

ISO 27001 does not prescribe the contents of a change register, but to see an example, I suggest you take a look at the free demo of our Request for Change and Change Record at this link: https://advisera.com/20000academy/documentation/request-for-change-and-change-record/

For further information see:

• How to manage changes in an ISMS according to ISO 27001 A.12.1.2 https://advisera.com/27001academy/blog/2015/09/14/how-to-manage-changes-in-an-isms-according-to-iso-27001-a-12-1-2/

2. And the other thing is about the process diagram. I believe it is essential for that document.

ISO 27001 does not require the documentation of the change process, but these are the general main steps you should consider:

• Request change: describe what needs to be changed and purpose
• Analise change: identify the impacts (positives and negatives) related to the change, and potential risks
• Approve / Deny change: Authorize, or not, the change.
• Implement change: Plan the details and implement the change
• Review / Report change: Verify if the change achieved expected results and communicate the change to relevant parts