Guest post Created: Jan 12, 2016 Last commented: Jan 12, 2016

How to document the external and internal context of the organisation

Dear Forum members If anyone can share a sanitised format for documenting context of the organisation would be immense help to me as I am preparing documentation for ISO 27001:2013 version . Thanks Debasish

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

Debasish,

In my opinion, it is not necessary to write a separate document for the context of the organization (clause 4.1 in ISO 27001:2013) - you can cover it through these documents:
- Business plan (if you have one)
- ISMS Scope
- List of requirements from your interested parties
- Risk assessment report

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community