Guest post Created: Jan 12, 2016 Last commented: Jan 12, 2016

SCope Documnet, ORg.Chart & Roles and Responsibilities Roles and Responsibil

As per ISO 27001:2013 , all the documents ( Scope Document, Org.Chart ities) are mandatory. Can all these be merged in ISMS Policy? Or do we need to maintain all these in a different document. Because we already talk about these in ISMS Manual?Kindly advice me on this? Thanks, Vijay

0 0

Assign topic to the user

Select user

Guest

AntonioS Jan 12, 2016

Sure, you can merge these documents in an unique document, there is no problem with the standard, although we recommend you to have different documents because there are different things. Also I think that it is very important to not duplicate documents, so for example, if you have a security policy in the Manual, it is not necessary to have another independent document with the same content.
Anyway, this article can be interesting for you Is the ISO 27001 Manual really necessary? : https://advisera.com/27001academy/blog/2014/02/03/is-the-iso-27001-manual-really-necessary/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community