Guest user Created: Apr 17, 2020 Last commented: Apr 17, 2020

Difference in clauses

When I read ISO 27001 I had one question, I wanted to inquire about it, what is the difference between clause (6.1.2) and clause (8.2), as well as clause (6.1.3) and clause (8.3), is it just a repetition of the information? Please explain. Thank u very much

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Apr 17, 2020

Clauses 6.1.2 and 6.1.3 refers to the planning, and first application, of risk assessment and risk treatment ("The organization shall define and apply..."), while clauses 8.2 and 8.3 refers to subsequent application of the process ("(...) at planned intervals or when significant changes are proposed or occur, (...)").

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Apr 17, 2020

Expert Advice Community