Guest user Created: Oct 10, 2018 Last commented: Oct 10, 2018

Referential documents

I have a question about the referential document: policy for business continuity. The tutorial said there will be a high percentage to keep this document as a referential document inside the Policy. Beside the strategy for business continuity isn’t necessary if we don’t want to become compliant with ISO 22301. Can we ignore both documents (the business continuity strategy and the policy for business continuity) if we don't want to become compliant with ISO 22301?

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Oct 10, 2018

Answer:

You can exclude the reference to the policy for business continuity if your organization won't implement business continuity with no problems. Also, you will only have to exclude the section 4.4 (Business continuity) of the ISMS policy template, as explained in the comments included in the template.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Oct 10, 2018

Expert Advice Community