Guest
Documented information control
I need consultation in the procedures for the it department document code (11.A.12.1) ; here at XXXX we record the procedures step by step video recording not documenting the procedures in word or pdf formats ; is it acceptable as per the ISO 27001 standard to be in videos format though we are keeping tracks for changes and record that at master list ?
Assign topic to the user
Expert
Rhand Leal
Dec 26, 2018
Answer:
ISO 27001 does not prescribe in which format information must be, only that formats must be defined, so you can use your procedures as video recording, provided that you manage them fulfilling the requirements for documented information from clauses 7.5.2 and 7.5.3 (e.g., approval flow, records, preservation, etc.)
This material will also help you regarding documented information:
- Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/
- Document management in ISO 27001 & BS 25999-2 https://advisera.com/27001academy/blog/2010/03/30/document-management-within-iso-27001-bs-25999-2/
Comment as guest or Sign in
Dec 26, 2018
Dec 26, 2018
Dec 26, 2018