Register Of requirements

An item in the Register of requirements needs to be specified at a level where the person responsible for its fulfillment understands what is needed to be done.

For example, for some persons you may need to specify only the name of the regulation (e.g., EU GDPR) or contract number, while for others you may need to be more specific, referring to specific clauses, or even writing them in the register.

This article will provide you a further explanation about requirements:

• How to identify ISMS requirements of interested parties in ISO 27001 https://advisera.com/27001academy/blog/2017/02/06/how-to-identify-isms-requirements-of-interested-parties-in-iso-27001/