Assign topic to the user
Answer: Yes. The SoA is a living document that must be updated as required to reflect the organization's approach towards information security, but you have to ensure that any modification to the SoA is justified and formally approved and recorded as defined in your document control procedure.
This material will also help you regarding documentation control:
- Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/
Comment as guest or Sign in
Sep 30, 2017

