Change control document
In regards to the document, I have a few questions that I hoped you could help me answer.
In regards to change control, I noticed that your document only covers high level changes, however, our needs go deeper as far as controlling the changes in software, virtual machines and any other aspects of our technological and development environments.,
Could you assist me in tailoring this template for those needs in compliance with the ISO27001/22301?
Assign topic to the user
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Please note that at beginning of section 3 Change management, you can adapt the following text:
“Each change to operational or production systems must be made in the following way:” replacing “change to operational or production systems” to the scope of change you want to cover, like:
“Each change to software, virtual machines, and technological and development environments must be made in the following way:”
In case you need to write a more detailed document, e.g., for including specific activities for each type of change, you can schedule a meeting with one of our experts so he can help you develop the document. To schedule a meeting please access this link: https://advisera.com/contact/
For further information, see:
- How to manage changes in an ISMS according to ISO 27001 A.12.1.2 https://advisera.com/27001academy/blog/2015/09/14/how-to-manage-changes-in-an-isms-according-to-iso-27001-a-12-1-2/
Comment as guest or Sign in
Dec 13, 2022