Expert Advice Community

Guest

Copying documents

  Quote
Guest
Guest user Created:   Sep 15, 2021 Last commented:   Sep 20, 2021

Copying documents

Why auditors copy documents from one organization to another? Is it to make their jobs faster or to use it as a start point in for the new organization? Though it was stated in the training that copying documents is not a good practice.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Sep 15, 2021

From your question is not clear whether the question is about audit documents (e.g., audit plans, audit checklists, etc.) or auditee documents, so this answer will cover both alternatives.

For audit documents the auditors have their own templates which they use as they see fit. 

Regarding auditee documents, document copy for non-audit purposes is strictly forbidden (very often documents are copied and sent to the auditor when a remote audit is performed), because the document does not belong to the audit area, and when the audit is performed on other organization, in general there is a confidentiality agreement signed with the customer.

Quote
0 1
Guest
Benedict Sep 15, 2021

Thanks.

My question is from the point of implementing. In the question I came across, there was not option that stated clearly that it was forbidden to copy documents from other organizations.

The best 2 options were..

1. To make the Implementation Faster..

2. To use as a start point for implementing a new ISMS in and organisation.

I was looking out for an option that says such practices is wrong... So my reason for bringing the question to the experts.

Quote
0 0
Expert
Rhand Leal Sep 20, 2021

I’m assuming the question you refer to is about the usefulness of using ISMS documents from other organizations on your own.

Considering that, the correct answer is that documents from other organizations are only useful as a starting point for developing your own.

This is so because documents from other organizations will not be adjusted to your context, so they can become too bureaucratic, or not provide proper security.

There wasn’t an alternative stating that it was forbidden to copy documents from other organizations because this is not always true. You may have access to documents from other organizations because they are of public nature, or because you may have some sort of agreement you have with them.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Sep 15, 2021

Sep 20, 2021