Guest user Created: Jan 28, 2020 Last commented: Jan 28, 2020

Filling templates

ISO 27001 & 22301

A quick question as I am writing my company templates.

Document Owner, Document Approver, and Document Reviewer: are they normally the same person?
When should the name be noted and when the role/dept. ? ( want to make dropdowns)
Should Owner, Approver, Reviewer… all be on de Document? Or only author and owner?

0 0

Assign topic to the user

Select user

Expert

Dejan Kosutic Jan 28, 2020

Here are the answers:

Document Owner, Document Approver, and Document Reviewer: are they normally the same person?

They could be the same person in a very small company, but in large companies you should try to have different persons for these roles. Even for a very small company you should try to have a different person for a reviewer, in order to create better documents.

When should the name be noted and when the role/dept. ?

When you describe roles and responsibilities, you should write job titles - this way when a person leaves the company or changes the position you do not need to change the policy. You can use person's name in the Change history of the document to have a record who exactly has made which changes; you can also use person's name when you make a record of who has approved the document.

Should Owner, Approver, Reviewer… all be on de Document? Or only author and owner?

ISO 27001 does not prescribe such things - best practice is to have author and approver of the document.

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 28, 2020

Expert Advice Community