Maintenance of ISO 27001

1. I want the process of maintenance after organization certified with ISO 27001.

ISMS maintenance involves

• operate the ISMS
• update documentation
• review risk assessment
• monitor and measure the ISMS
• perform internal audit
• perform management review
• perform corrective actions

These articles will provide you a further explanation about ISMS maintenance:

• ISO 27001 Certification: What’s next after receiving the audit report? https://advisera.com/27001academy/blog/2015/05/18/iso-27001-certification-whats-next-after-receiving-the-audit-report/
• How to maintain the ISMS after the certification https://advisera.com/27001academy/blog/2014/07/14/how-to-maintain-the-isms-after-the-certification/

2. How to maintain the document policies procedures etc related the ISMS

Maintenance of documentation is based on a regular review, performed by the document owner, based on the results of risk assessment, review of security incidents, and results of internal audit and management review. These sources of information will help the document owner to decide if the document requires some adjustment.