Documentation hierarchy

ISO 27001 does not prescribe documentation hierarchy, so organizations can adopt the framework that best suits their needs.

Considering that, using ISO 10013 as a reference for documentation hierarchy is an acceptable approach.

Regarding the fact that ISO 10013:2001 is a withdrawn standard, unless you have specific requirements to adopt this version (e.g., customer requirement or law), you should consider using the 2021 version of the standard, because its requirements are better aligned with current versions of ISO management systems standards.

For further information, see:

• How to structure quality management system documentation https://advisera.com/9001academy/knowledgebase/how-to-structure-quality-management-system-documentation/