ISO27001 Toolkit materials
We recently purchased the Advisera ISO27001 Toolkit. We are working through the documentation and have a query we would appreciate your advice on. We believe we need to document the following couple of controls and policies:
Human Resources Security Policy
Data Leakage prevention policy
We noticed there are no templates for these in the Annex folder although they appear to be referenced in other provider template packs, are we missing files or can you point us in the right direction ?
Assign topic to the user
Please note that our ISO 27001 Documentation Toolkit covers all mandatory documents and some documents that are not mandatory.
A Human Resources Security Policy does not need to be documented according to the standard, and in our opinion, it would be an overhead to document it.
Regarding a Data Leakage prevention policy, the following documents in the toolkit cover the control A.8.12 Data leakage prevention:
- Information Classification Policy
- IT Security Policy
- Security Procedures for IT Department
We recommend you check if these templates can fulfill your needs for a Data Leakage prevention policy. These templates can be found in folder 08 Annex A Security Controls.
Comment as guest or Sign in
Nov 25, 2022