Expert Advice Community

Guest

Integration suggestion on QMS (AS9100) & ISMS (27001)

  Quote
Guest
Guest user Created:   May 29, 2020 Last commented:   May 29, 2020

Integration suggestion on QMS (AS9100) & ISMS (27001)

For a company like us (***), how do we define the scope, I mean what are our inclusions and exclusions in the scope of ISMS

0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal May 29, 2020

Inclusions and exclusions in the scope of ISMS will depend on the information, your organization wants to protect.
You need to identify in which part of your company is your most valuable information - see the details here: How to define the ISMS scope https://advisera.com/27001academy/knowledgebase/how-to-define-the-isms-scope/

For example, if the most important information is about new products, then the Research & Development process/department must be in the scope. If the most important information is about customers, then the Customer support process/department must be in the scope. You can also define all the organization's information as part of the ISMS scope.

This article can provide you further answer about integrating management systems (the general concept applies to your case):

These materials will also help you regarding scope definition:

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

May 29, 2020

May 29, 2020