Expert Advice Community

Guest

Documented information control

  Quote
Guest
Guest user Created:   Dec 26, 2018 Last commented:   Dec 26, 2018

Documented information control

I need consultation in the procedures for the it department document code (11.A.12.1) ; here at XXXX we record the procedures step by step video recording not documenting the procedures in word or pdf formats ; is it acceptable as per the ISO 27001 standard to be in videos format though we are keeping tracks for changes and record that at master list ?
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Dec 26, 2018

Answer:

ISO 27001 does not prescribe in which format information must be, only that formats must be defined, so you can use your procedures as video recording, provided that you manage them fulfilling the requirements for documented information from clauses 7.5.2 and 7.5.3 (e.g., approval flow, records, preservation, etc.)

This material will also help you regarding documented information:
- Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/
- Document management in ISO 27001 & BS 25999-2 https://advisera.com/27001academy/blog/2010/03/30/document-management-within-iso-27001-bs-25999-2/
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Dec 26, 2018

Dec 26, 2018