Guest user Created: Jan 12, 2016 Last commented: Jan 12, 2016

Referring to Inventory of assets from the ISMS Scope document

Item 3.4 Resources of the ISMS Scope document says it may add a reference to the asset inventory. The asset inventory is performed once defined the scope of the ISMS, then how could I add a reference to that document.

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

Answer: Clause 4.2.1 a) of ISO 27001 requires you to document the scope in terms of assets, so basically you have 2 choices:

a) List most of your assets in the Scope document - I wouldn't recommend that, or

b) Refer to the Asset inventory - much better solution since you will (probably) make it anyway.

Now, since you are writing the ISMS Scope document now, and Asset inventory later, you can just say that Asset inventory will be developed until certain date.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community