Coverage of ISO 27001 requirements in the toolkit
Assign topic to the user
Answer: The toolkit covers mentioned clauses in the following way:
- Clause 8.1 (Operational planning and control) - this is covered by all the policies and procedures you'll find in the toolkit in folder "08 Annex A"
- Clauses 8.2 and 8.3 (Information security risk assessment and treatment) - you'll find the documents in the folder "05 Risk assessment and risk treatment methodology"
- Annex A.5 (Information security policies) - this is covered by all the policies and procedures you'll find in the toolkit in folder "08 Annex A"
- Annex A.7 (Human resource security) - besides the two documents in the folder "07 Human resources security", the document Supplier security policy (folder 08 - A.15) covers controls A.7.1.1, A.7.1.2 and A.7.2.2, Security clauses for suppliers and partners (folder 08 - A.15) covers the control A.7.1.2, and Incident management procedure (folder 08 - A.16) covers A.7.2.3.
By the way, in the root folder of your toolkit you'll find a PDF document called "List of documents" where it is specified which document covers which clause of the standard.
Comment as guest or Sign in
Jan 14, 2019