Guest user Created: Dec 26, 2018 Last commented: Dec 26, 2018

Documented information control

I need consultation in the procedures for the it department document code (11.A.12.1) ; here at XXXX we record the procedures step by step video recording not documenting the procedures in word or pdf formats ; is it acceptable as per the ISO 27001 standard to be in videos format though we are keeping tracks for changes and record that at master list ?

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Dec 26, 2018

Answer:

ISO 27001 does not prescribe in which format information must be, only that formats must be defined, so you can use your procedures as video recording, provided that you manage them fulfilling the requirements for documented information from clauses 7.5.2 and 7.5.3 (e.g., approval flow, records, preservation, etc.)

This material will also help you regarding documented information:
- Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/
- Document management in ISO 27001 & BS 25999-2 https://advisera.com/27001academy/blog/2010/03/30/document-management-within-iso-27001-bs-25999-2/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Dec 26, 2018

Expert Advice Community