Requirements identification
Assign topic to the user
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Answer: Some techniques you may use to identify needs and expectations that are base for ISMS's requirements are:
- documentation review, covering documents like the strategic plan, policies, procedures, contracts, and laws, among others
- interviews with top management, process owners, key users, clients and suppliers representatives.
The use of checklists also can help you not forget relevant topics and optimize your time and effort.
This article will provide you further explanation about requirements identification:
- How to identify interested parties according to ISO 27001 and ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-identify-interested-parties-according-to-iso-27001-and-iso-22301//
Comment as guest or Sign in
Jan 25, 2017