Continuous responsibilities
Assign topic to the user
Please note that “continuous responsibilities” refers to tasks without a specific deadline (i.e., they must be performed while the ISMS is being used) that must be performed on demand.
Considering that, you should consider such tasks as done for a specific demand when you generate the related evidence that it was performed.
For example, the task “Identify all legal, regulatory, contractual, and other requirements related to interested parties that can affect or be affected by information security management.”, is considered “done” when you update the Register of Requirements module.
Comment as guest or Sign in
Feb 22, 2022