Guest user Created: May 01, 2016 Last commented: May 01, 2016

SOA for two sites?

We are much appreciated your training material as those are very helpful for us, I want an advice from you that we are adding 1 more site (in other city) in our scope for ISMS 27701:2013 audit so do we required another SOA document or we can maintain in already existing document by adding column in it.

0 0

Assign topic to the user

Select user

Guest

Antonio Jose Segovia May 01, 2016

Answer:
From my point of view it is not necessary, I mean, you do not need to have 2 different SOA, but in your unique SOA you can add specific information about each site when a control is implemented in a different way in both sites (although I think that generally the implementation of controls will be equal or similar in both sites). So, you can add a column in your SOA document.

This article about the SOA can be interesting for you “The importance of Statement of Applicability for ISO 27001” : https://advisera.com/27001academy/knowledgebase/the-importance-of-statement-of-applicability-for-iso-27001/

And our online course can be also interesting for you because we give more information about the SOA “ISO 27001:2013 Foundations Course” : https://advisera.com/training/iso-27001-foundations-course/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Apr 30, 2016

Expert Advice Community

SOA for two sites?

SOA for two sites?

Assign topic to the user

Comment as guest or Sign in

Suggested Topics

SoA Tasks

Controls in the SoA that so not show up in the Risk Assessment

Changing SOA in praparation of audit