Can we update the SOA document once it's already been shared with the auditors?
Assign topic to the user
Expert
Rhand Leal
Sep 30, 2017
Answer: Yes. The SoA is a living document that must be updated as required to reflect the organization's approach towards information security, but you have to ensure that any modification to the SoA is justified and formally approved and recorded as defined in your document control procedure.
This material will also help you regarding documentation control:
- Managing ISO Documentation: A Plain English Guide https://advisera.com/books/managing-iso-documentation-plain-english-guide/
Comment as guest or Sign in
Sep 30, 2017
Sep 30, 2017
Sep 30, 2017