Get 2 Documentation Toolkits for the price of 1
Limited-time offer – ends March 28, 2024

Expert Advice Community

Guest

Integrated implementation

  Quote
Guest
Guest user Created:   Feb 20, 2019 Last commented:   Feb 20, 2019

Integrated implementation

Do you think if a company is working towards both ISO 27001 and ISO 22301 certifications, it should keep completely separate mandatory documents such as scope document if the scope is the same? Or can it be merged? I would love to know your point of view.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Feb 20, 2019

Answer:

If the content of the involved mandatory documents is the same, as in the case of the scope you've mentioned, you can merged them with no problem. In case they are not, or are only partially the same, you must consider if by merging them, they would not become too big or overly complex to handle. In these cases it is better to keep separated documents.

These materials will provide you further explanation about integrating management systems:
- How to implement integrated management system https://advisera.com/blog/2015/10/05/how-to-implement-integrated-management-systems/
- What to implement first: ISO 22301 or ISO 27001? https://advisera.com/27001academy/blog/2017/04/03/what-to-implement-first-iso-22301-or-iso-27001/
- Free webinar - ISO 27001 & ISO 22301: Why is it better to implement them together? https://advisera.com/27001academy/webinar/iso-27001-iso-22301-better-implement-together-free-webinar-on-demand/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Feb 20, 2019

Feb 20, 2019