Crucial component in any IS procedure
Assign topic to the user
The crucial component of a procedure maybe be the adequate description of each activity. For example, if you have a procedure for the backups, it is very important that it describes all related activities (schedule, number of normal tapes, number of recycled tapes, etc). I think that is also very important the control of changes, to manage the modifications in the procedure.
Finally these 2 articles can be interesting for you:
How to structure the documents for ISO 27001 Annex A controls : https://advisera.com/27001academy/blog/2014/11/03/how-to-structure-the-documents-for-iso-27001-annex-a-controls/
How detailed should the ISO 27001 documents be? : https://advisera.com/27001academy/blog/2014/09/22/detailed-iso-27001-documents/
Comment as guest or Sign in
Jan 12, 2016