Expert Advice Community

Home / ISO 27001 & 22301 / Applicability of A 14.2.2 Change Management for staff augmentation companies

Applicability of A 14.2.2 Change Management for staff augmentation companies

ISO 27001 & 22301
  Quote
mhsatish Created:   Jan 20, 2020 Last commented:   Jan 20, 2020

Applicability of A 14.2.2 Change Management for staff augmentation companies

ISO 27001 & 22301
Can we exclude A 14.2.2 if a company is a bodyshop for other company and the vendor only performs code changes, updations and customizations based on client change management policy.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.
Expert
Dejan Kosutic Jan 20, 2020

The exclusion of controls in ISO 27001 can be made only if there are no related risks, and if there are no legal or contractual requirements.

So you have to perform risk assessment and review all the requirements, and then you can conclude whether you can exclude this control. 

These materials will also help you regarding exclusion of controls, managing risks and listing requirements:

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jan 20, 2020

Jan 20, 2020

Suggested Topics
Borivoj Tydlitat Created:   May 06, 2025 ISO 27001 & 22301
Replies: 1
0 0

Reviewing incidents in Conformio Management Review
Guest user Created:   Oct 05, 2023 ISO 27001 & 22301
Replies: 1
0 0

Change management and Change classification
Guest user Created:   Sep 22, 2023 ISO 27001 & 22301
Replies: 1
0 0

A.15.2.2 Managing changes to supplier services

This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.

If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.