Including business process description and scoping in the ISO project
Assign topic to the user
Any major ISO management standard (ISO 27001, ISO 9001, ISO 14001, etc.) requires to document the scope of the implementation; also ISO standards require you to document particular processes that are relevant - for example, ISO 27001 requires incident management to be documented. Therefore, you should define the scope and describe the relevant processes as part of your ISO implementation.
These articles will help you:
- List of mandatory documents required by ISO 27001 (2013 revision) https://advisera.com/27001academy/knowledgebase/list-of-mandatory-documents-required-by-iso-27001-2013-revision/
- List of mandatory documents required by ISO 9001:2015 https://advisera.com/9001academy/blog/2015/10/20/list-of-mandatory-documents-required-by-iso-90012015/
- List of mandatory documents required by ISO 14001:2015 https://advisera.com/14001academy/knowledgebase/list-of-mandatory-documents-required-by-iso-140012015/
- 8 criteria to decide which ISO 27001 policies and procedures to write https://advisera.com/27001academy/blog/2014/07/28/8-criteria-to-decide-which-iso-27001-policies-and-procedures-to-write/
This book will also help you regarding writing the documentation:
- Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/
Comment as guest or Sign in
Sep 18, 2017