Guest
Disaster Recovery Plan ISO 27001
There is a document - Disaster Recovery Plan 27001 - included in ISO 27001 Documentation Toolkit. This document cover the requirements from Annex A, i.e. A.17 Information security aspects of business continuity management ? In this case, in Statement of Applicability, is it right (and enough) to specify this document as Implementation Method for controls no. A.17.1.1, A.17.1.2, A.17.1.3 and A.17.2.1?
Assign topic to the user
I don't want to implement full Business Continuity, only be complaint with ISO27001 requirements regarding A.17 Information security aspects of business continuity management.
Answer:
Yes, with our template Disaster Recovery Plan 27001 you can cover all requirements established in the Annex A.17. The business continuity is treated in depth in the ISO 22301, but in the ISO 27001 with a Disaster Recovery for the IT infrastructure is enough.
Please let us know if you have more doubts regarding the documentation.
Comment as guest or Sign in
Jan 12, 2016
Jan 12, 2016
Jan 12, 2016