Requirement of records of training, skill, experience, and qualifications
I have become a little stuck on the requirement of records of training, skill, experience, and qualifications – some of these records seem to be captured in your Training and Awareness Plan, but I am I right in thinking experience and qualifications need to be kept elsewhere? (e.g. qualifications and experience captured by HR for each relevant staff member?)
Assign topic to the user
ISO 27001 INTERNAL AUDITOR COURSE
Everything you need to perform the internal audit for the first time.
Enroll for free 
ISO 27001 INTERNAL AUDITOR COURSE
Everything you need to perform the internal audit for the first time.
Enroll for free
ISO 27001 INTERNAL AUDITOR COURSE
Everything you need to perform the internal audit for the first time.
Enroll for free
Your understanding is correct. Please note that the Training and Awareness Plan defines which records must be kept, but it does not contain them itself. In the column "Implementation record of necessary training", you need to inform where such records can be found, and some of them will be stored by HR in the employees' personal files.
This article will provide you a further explanation about performing training:
- How to perform training & awareness for ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/05/19/how-to-perform-training-awareness-for-iso-27001-and-iso-22301/
Comment as guest or Sign in
Mar 03, 2020