Guest user Created: Nov 23, 2021 Last commented: Nov 23, 2021

Audit findings

Hi Dejan , what is your view if an auditor gives me findings for not securely control employee's records. However, my ISMS scope does not cover employees record to be protected. ISMS scope is to protect information gather/process in procurement system. Appreciate if you could give your professional view.

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Nov 23, 2021

Without specific information about the findings’ statements and the context of your organization, it is not possible to provide a more proper answer.

Even though your ISMS scope is focused on procurement system, you will still need to have employee records related to e.g. training (these are mandatory ISMS records), and you will need to protect those records as well.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Nov 23, 2021

Expert Advice Community

Audit findings

Audit findings

Assign topic to the user

Comment as guest or Sign in

Suggested Topics

Recording ISMS Internal Audit Findings

ISO 27001 Internal Auditor Course Question

2005 revision deadline