Implement ISO 27001 & ISO 22301- ISMS and BCMS Manual

Please note that neither ISO 27001 nor ISO 22301 require the development of a Manual, and for good reasons. If you put all the policies and procedures into a single document, this will make their reading very difficult and maintenance more complex.  

Since this is a requirement for a specific market need, we suggest:

• For ISO 27001 you can use the Information Security Policy and the Statement of Applicability as a single document to describe briefly how your company will implement its information security.
• For ISO 22301 you can use the Business Continuity Policy and the Business Continuity Strategy as a single document to describe briefly how your company will implement its business continuity.

This article will provide you with further explanation about ISMS Manual (the same concept applies to BCMS):

• Is the ISO 27001 Manual really necessary? https://advisera.com/27001academy/blog/2014/02/03/is-the-iso-27001-manual-really-necessary/

This material will also help you regarding ISMS documentation:

• Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/