Guest user Created: May 25, 2017 Last commented: May 25, 2017

Document classification

ITIL & ISO 20000

Question: For example in the process to prepare a company to be certificate on ISO 20000, how you classify the documentation that are not controlled by SGTI , but are in the same company. For example if I want to make a reference in my document from others departments the documents are external or I can make the referents with the same nomenclature that my company use?

0 0

Assign topic to the user

Select user

Expert

Branimir Valentic May 25, 2017

Answer:
Based on the details, I assume you are implementing Information Security process and related controls.
I would suggest that you make agreement on company level what document confidentiality levels you will use. In such way you will avoid having (e.g. for same kind of document) different confidentiality levels.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

May 25, 2017

Expert Advice Community