Policy for secure development
I have a question about the Policy for safe development. The policy talks in chapter 3.4 about control A.14.1.1.The reference documents above do not include the control. Can I add control A.14.1.1 to the reference documents and the policy for safe development also as the implementation method for control A.14.1.1 inside the SoA?
Assign topic to the user
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Both adjustments can be made in your document, i.e., including reference to control A.14.1.1 in section 2 (reference documents), and add the Secure Development Policy as an implementation method for control A.14.1.1 in the SoA.
Comment as guest or Sign in
Nov 29, 2019