ISO 20000 and ISO 27001 integration
Assign topic to the user
Answer: Being ISO management standards, ISO 20000 and ISO 27001 have many similarities that become easier to integrate them (and this similarities will become clearer after the release of the new version of ISO 20000, that may be in the next two years - currently the revision is half way across the process - https://www.iso.org/standard/70636.html).
Considering the current standard, I advise you to start with the documenting the common procedures and records (e.g., internal audit and management review), considering the requirements of both standards, and after that go for the specificities of each standard.
These articles will provide you further explanation about integrating management systems:
- How to implement ISO 27001 and ISO 20000 together https://advisera.com/27001academy/blog/2015/03/16/how-to-implement-iso-27001-and-iso-20000-together/
- How to implement integrated management systems https://advisera.com/articles/how-to-implement-integrated-management-systems/
These materials will also help you regarding integrating management systems:
- How to integrate ISO 27001 and ISO 20000 [free webinar on demand] https://advisera.com/27001academy/webinar/how-to-integrate-iso-27001-and-iso-20000-free-webinar-on-demand/
- ISO 27001 vs. ISO 20000 matrix https://info.advisera.com/27001academy/free-download/iso-27001-vs-iso-20000-matrix
- Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/
- Preparations for the ISO Implementation Project: A Plain English Guide https://advisera.com/books/preparations-for-the-iso-implementation-project-a-plain-english-guide/
Comment as guest or Sign in
Aug 15, 2017