Guest user Created: Apr 22, 2020 Last commented: Apr 22, 2020

8.1 Operational planning and control

Since the Clause itself says “The organization shall keep documented information to the extent necessary to have confidence that the processes have been carried out as planned.”, does the Document in your Toolkit “Project Plan” fulfills the requirement of this clause? Since we will be planning the different phases of ISMS implementation in this doc and carrying out accordingly, do we require any other Documented info as it is a mandatory Doc to avoid major non Conformity.

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Apr 22, 2020

In fact, the Project Plan and all templates in the toolkit can be used to fulfill this requirement, since some of them define what must be carried out (e.g., policies and procedures), and others record needed requirements (e.g., Specification of Information System Requirements), performed tasks (e.g., Internal Audit Report) and achieved results (e.g., Management review minutes)

This article will provide you further explanation about document management:

Records management in ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/11/24/records-management-in-iso-27001-and-iso-22301/

This material will also help you regarding document management:

Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/

Quote

0 1

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Apr 22, 2020

Expert Advice Community