Template content

Answer:

First of all, sorry for this confusion.

The documents from sections A.6 and A.18 are not missing from the toolkit – you can find them here:
- A.6 – these documents are covered in the toolkit in folder "A.6 Organization of information security”, located on folder “08 Annex A”
- A.18 – these documents are covered in the toolkit in folder "02 Procedure for identification of requirements”
In case you are also in doubt about documents from section A.5, all the documents from folder “08 Annex A” cover the requirements about information security policies (A.5.1.1) and review of the policies (A.5.1.2)

Well under that folder : A.6 Organization of information security”, ther eis only two docs: Bring_your_own_device_BYOD_Policy and Mobile_Device_and_Teleworking_policy, where is information regarding: 6.1 Internal organization, 6.1.1 Information security roles and responsibilities, 6.1.2 Segregation of duties, 6.1.3 Contact with authorities, 6.1.4 Contact with special interest groups, 6.1.5 Information security in project management,
Regards,

Eric

Control 6.1.1 Information security roles and responsibilities is covered by all templates in the toolkit. For each required action on a template always it is required the definition of who must perform it (the field [job title]).

Please be aware that ISO 27001 does not require you to document each and every control you declare as applicable, you can simply describe the implementation of such undocumented controls in the Statement of Applicability. In order to avoid overhead for small companies, we have decided to include in the toolkit only those documents that are mandatory + those that are most commonly used; in other words, you will not find in the toolkit the documents that are not mandatory and that are not used very often.

For more information regarding controls A.6.1.4, and A.6.1.5 please read these materials:
- How to manage security in project management according to ISO 27001 A.6.1.5 https://advisera.com/27001academy/what-is-iso-27001/
- Special interest groups: A useful resource to sup port your ISMS https://advisera.com/27001academy/blog/2015/04/06/special-interest-groups-a-useful-resource-to-support-your-isms/